This is great news from Apple:

All Mac portables with the Apple T2 Security Chip feature a hardware disconnect... [which] prevents any software — even with root... and even the software on the T2 chip—from engaging the microphone when the lid is closed.