The legal definition at play (at least when it comes to liability of companies under stuff like Section 230, GDPR, NetzDG or the planned DMA/DSA) is that a company makes reasonable best efforts/good faith to prevent harm. Everyone including lawmakers is aware that no system is perfect, but they do require that companies at least make an effort. Releasing a system capable of destabilizing nations (which deepfakes as a political weapon absolutely are) without any safeguards intentionally will get the hammer of the law brought upon them.
> Generated images light up like a Christmas tree with Error Level Analysis, so it's not hard at all to "detect" them.
For now, and for experts. Technology will evolve, post-production editing will be used to mask artifacts... and even if you have an expert that needs a day to verify inauthenticity, the damage will already be done. Rumors can spread in a matter of mere minutes.
Hell, just this week Turkey saw a potential deepfake porn, allegedly released by Russia, about Muharrem Ince damage his reputation enough to force him to resign from the election [1] - which turned out to be extremely close in the end. AI is a weapon of war, and it's in the hands of everyone.
[1] https://www.telegraph.co.uk/news/2023/05/14/turkey-deepfake-...