- On a rooted/jailbroken device, the system libraries could be hacked to provide any image from the camera.

- The app itself could be hacked or the protocol reverse-engineered

- The company's servers could be compromised, either internally or externally. Only trust this service as much as you trust the company.

- Picture of a picture or other staged pictures

In short, there's no way they could deliver on what they promise. It would also break in more pedestrian ways, like if you want to take a photo somewhere you don't have good network access.

I think only a device manufacturer could get closer to providing this, signing the raw camera buffer and metadata with a device-specific private key. You could use lidar or other sensors to capture more of the scene, to make it harder to duplicate. And even then it would not be 100%

I guess the question for this company is whether there's enough of a business model in the improved security that they can provide over just normal exif data.