C2PA would use signing, but even having signing at all would be useful. Sony signs with a Sony key, and that goes into c2pa. Having a public or uploadable key would be nice