Right, the GPG timestamp is trivial to fake. There is also RFC 3151 timestamp protocol, but it uses a trusted third party rather than distributed trust.
Is this Bitcoin time stamping thing the only alternative, or are there other ways to securely time stamp a document?
Depends whether you are willing to consider a solution relying on a trusted third party "secure".