Private keys don't verify that an NFT was authorized by the owners of the painting. You're still relying on real-world trust and claims that the NFT you're buying was the "real" NFT.

If the owners of the Banksy came out a few days later and claimed that someone else sold a fake Banksy NFT, but they're now going to sell the real NFT, the private keys won't help.