>>275936497
for headsets with lighthouse tracking (vive, index), cameras aren't involved in tracking. Instead the basestations sweep a laser across your room, and individual photodiodes on the controllers and headset determine position from timing. However, vive and index have auxiliary cameras on the headset for passthrough, could potentially be hacked.

For inside out headsets (wmr, rift S, quest) the cameras look out into the world, and your computer does the tracking. The cameras are pretty locked down (don't appear as regular webcams), but could be hacked.

The old rift cv1 "sensors" are regular greyscale webcams with a physical filter to limit them to IR light, and they track the IR LEDs on headset and controllers. their drivers don't make them appear as regular webcams, but potentially could be hacked.

For a theoretical virus that hacks VR headsets and streams images back to an attacker, I'd say the most likely is vive/index passthrough cameras. Those have relatively easy to use APIs to get images (for devs). Inside out and CV1 cameras are less likely, just because it'd involve a lot of driver hackery to get it to work at all.