I’m not well versed in this at all, but would this also work if the “attacker” were to take a screenshot of the image they wanted to alter, and plug that into an AI tool? It sounds more like metadata tweaking from the article, which would be bypassed by a screenshot.
Interesting, thanks for the insight!