I would imagine that if you were up to something like this, the laptop in question wouldn't be your daily driver. In which case you would likely want to physically disable inputs and sensors like cameras, mics, location hardware, etc. I seem to also recall once reading that it was good measure to use a laptop with a removable battery, having actually removed the battery and only being powered by your power cord. Or so I've heard.