Nothing is ever foolproof, but also, public-key crypto signatures are as secure as can be. Sure, you might be able to eventually extract a private key from camera hardware, but that's on the level of intelligence agencies, completely beyond the current situation of deepfakes being possible to make by anyone with an internet connection and no skills.

I would have thought most iPhones absolutely know if they're photographing a scene or a flat surface