you can prevent feeding the doctored image into the sensor if the camera also senses depth, and only signs the image and depth information together. this is how they prevent a photo from unlocking face id on a phone