Malware can take them for you, and it doesn't need to be your phone either. Maybe your gf is playing some mobile game, while pointing the camera at you... which is pretty reasonable situation.
That's what people get for trying to put every function into a single device...