[stomachmonkey]

If you are on an iPhone and an app has camera / mic / location enabled it's because the user authorized it in the first place.

This is part of the benefit of the walled garden everyone likes to complain about with Apple.

When submitting to the app store you must declare you are using those features and provide a valid use case.

As a developer you can't try to "sneak it past them" by not declaring it but doing it anyway, that simply doesn't work for a number of reasons mostly because, they review each and every submission and the checks for that stuff are all automated.

No app can enable those features on their own.

It requires approval from Apple and then explicit access to the hardware must be requested which needs to be acknowledged by the user.