Already do, but that doesn’t help with the many more curious and nosy administrators out there, which is why you need regulations, enforcement, and auditing.
On a linux-like system, one could block access using file permissions, e.g chmod a-r /dev/snd/pcmC0D0c for a microphone. Probably less easy to do on Android, though.
