So we must also make it impossible for an app to read any images taken inside the app itself? You can’t literally make any apps at all

Then it is detectable. Those permissions should have a third option alongside allow and block - spoof.