Not only do they still spy on you, the security vulnerabilities in the unsupported OS makes it piss easy for anyone else to do so too.

If you MUST use a Google Android device, make accounts dedicated to your work usage only and power it off when you aren’t working.

Something like that. Emulators also give the ability to emulate cameras using pictures or video feeds.

They just need to set up a Google play equipped emulator, set the picture as simulated camera input and put in the inputs to the emulator (also automatable)