Apple should add a non-maskable, unforgeable out of band signal, like the green and orange “lights” that indicate the camera or microphone are on. This logic goes back to the Rainbow books.

Ideally it would be an LED separated from the screen that only the kernel could access.