I have barely talked about the RSA key side channel leak, when it just became apparent that it is possible to turn on a MacBook's video camera without also turning on the (hardwired) LED indicator light. That makes it possible for an attacker (once they gain access to your machine remotely) to record video of whatever you do without you knowing. The last stand against this kind of (popular) extortion has just fallen - it is no longer possible to trust the LED indicator to determine whether the camera is recording or not.
I have solved this once and for all. If you can decode my face from the below photo, then you have defeated my ingenuity.