With a separate camera and microphone, I just unplug them when not in use. For the builtin camera, I put a sticker over it.

I have zero faith in any software lockouts.