Also, clever cheating devices have been found in over the board chess competitions. So, this is possible. Moreover, one needn't carry a device on themselves. A cheater may have accomplices providing hints, if they carry a device.
It will be interesting to see how chess tournaments, as well as FIDE, chess.com, and other major chess institutions react to this situation. The potential for cheating has now been brought to the absolute forefront of chess discussion. And Carlsen's actions have been questioned by FIDE in recent interviews, with FIDE staff condemning "vigilantism" of a kind.
Some set of resolutions seems necessary--perhaps standards for security in major chess tournaments, perhaps an alliance to share cheating or reliability data amongst major chess operations, perhaps a standard term in major chess tournament agreements that no previously identified cheaters (online or otherwise) will be allowed to play, and perhaps sanctions in some form against Carlsen (or Niemann, if concrete evidence against him emerges).