It’s the other way around - for secure environments there is an approved device list. If your device is not on that list, it does not go in.

There is also an approved human list. And the approved humans carry responsibility and consequence when going into the space.

Some services offer modified devices without a camera or mic for high-security environments. https://www.gadgetreview.com/the-iphone-with-no-camera-and-w...

I imagine this is why Apple has kept the mic array and camera as separate removeable components in their devices when pretty much everything else is integrated.