People normally do this by scanning a 10mW 832nm laser with a mirror, according to Dan Gelbart in https://www.youtube.com/watch?v=0MtRxX0crjU. The lecture is 77 minutes, covering nonlinear junction detectors, digital calipers, the US-embassy bug in Russia, laser microphones bounced off windows, and geometric errors from material relaxation. The bit about camera detectors is close to the end. Works for eyeballs too.

Lensless sensors (for example, using compressed sensing, or Hadamard shadow masks) can presumably defeat this, but also, watching from far enough away should defeat it. Hard to do that inside a pervert's AirBNB, though.