But we are talking about consumer devices here.

Are you saying Apple and Google can't put a secure hash into the output from their camera apps that apply after their internal processing is done?