Earlier quoted context omitted.
This is the only correct design, yet almost nobody does this. One of the challenges is verifying that this was done correctly. You may be able to verify a design like this once with a teardown, but it's impractical to verify your particular device, and next to impossible to re-verify this every time you leave your laptop unattended.
My work laptop (a Thinkpad) has a built-in plastic slider that physically covers the camera. If something activates the camera while that cover is closed, it won't see anything.
Lenovo didn't allow you to configure a T480 with both the high-resolution display and the plastic slider, it was either-or. The high-resolution display was their premium option that omitted the slider and added two more IR cameras for Windows Hello support.
So in addition to not getting the slider, I also had to disable the IR cameras.
I'm half tempted to buy the version of the display bezel with the slider and see if it'll fit as a replacement.