Comment by nine_k

Once you have the camera-controlling binary blob separated in an MCU behind a USB interface, you can run a modern kernel (maybe not even Linux), without running the binary blob in it.