No, you can copy the timestamp as well.
Every token you create gets a unique ID, that only that token has.
So with that in mind, a NFT is as unique as a painting in your example, as a NFT is always "one of a kind".
What is reality anyway? We have a distributed, decentralized database (Ethereum) that people can set/get data in/from. Now we also have a abstraction on top of that that allows us to have unique data. What can we do with this? Fuck should I know, also I don't really care. Think of it what you want.
Have you not heard of this concept? Seems to be a bit of copout to explaining the value of an NFT given an NFT, by it's mere existence, has no bearing on anything outside of a blockchain. But if you are unclear on the concept: https://en.wikipedia.org/wiki/Reality
And while it's notable that digital art can be duplicated perfectly and physical art cannot, I don't personally think that matters all that much. People who are buying a Picasso aren't doing so just for the art, they're doing it so they can say they own a Picasso. In the same way you're not buying an NFT for the art itself, you're buying it because it's uniquely identifiable in a way you and others care about.
You own the token as you own an API key for a service, except since decentralized there's no network operator who can revoke your key ("suspend your account") as with, say, centralized SaaS REST APIs.
You're not buying the JPEG, you're buying an API key that happens to be linked to the JPEG.
You can duplicate or send the keys to your house by mail, and if the recipient changes them, you lose physical access.
If a national highway system goes down, your house is still there.
If a digital token network goes down, be it a token-based centralized SaaS company with an API or token-based decentralized blockchain, goes down, your assets go down with it, regardless of legal abstractions.
An NFT is basically like a 'certificate of authenticity' - whether you think it's BS or not depends entirely on who issued it. A item that includes such a certificate from a known reputable source may be extremely valuable to a collector, where-as the regular item may be practically worthless, and that can be true even if nobody can tell the items apart. At the same time, John Doe down the street signing 'certificates of authenticity' doesn't provide any value because nobody cares who John Doe is, in the same way that some random person signing an NFT doesn't automatically make it worth anything since anybody else can just come along an do the same. But if the author of an artwork came by and produced an NFT of it, that's unique in a way that people may care about.
So paintings just “lucked out” and already had a convenient scarce item that interested parties could agree represents the “original act of creation of the work of art,” because the technology to create an exact copy doesn’t exist, and it’s extremely expensive and difficult to create a convincing forgery.
In a similar way an NFT has value based on particular details about the NFT such as the author and database it is in, not just the bytes themselves. You can certainly create the same NFT with a new author, or on a new database, or etc. but it's no longer the same NFT at that point, it's a replica and can be distinguished from the original. And while an NFT published by the author of the art might be a interesting thing to own/control, the same NFT published by a random John Doe doesn't carry the same relevance. And fundamentally you still can't change the properties of the original NFT in the original database.
I think you missed the point, someone has issued the certificate and it only matters if you value that person's or entity's opinion. If you don't then it's just a meaningless piece of paper.
For example, PSA grades playing cards. A rare card that is graded highly by PSA will generally make it much more valuable than an ungraded version of the same card. However, if someone send me a card in the mail and I grade it a 10 and send it back, that means nothing because nobody cares about my opinion on cards.
Similarity, if PSA were to issue NFTs, they would have value specifically because it was PSA who authored the NFTs. I could take the exact same data and author an NFT myself, but nobody would care because they specifically want the one that was created by PSA, and that is something that is verifiable and that I cannot duplicate. They don't want it for any real tangible reason, they want it so they can say "I own an NFT from PSA".
Well it has something written on it, but yes pretty much. If the "somebody" is someone you care about though, then that can make it more than just a piece of paper, in the same way that if you care about the issuer of a certificate then it is more than just a piece of paper. I get the distinction you're trying to make, and I don't think it really matters, but perhaps it was a bad example and autographs would have been a better one.
To be clear, I don't own NFTs, I get the idea but they don't appeal to me. But I also don't own any expensive art either for the same reason, so to each his own. I do own a bunch of trading cards, and I'm sure plenty of people would just view them as pieces of paper. Point being, people value plenty of silly things, NFTs are just one of them.
Generally the content is hosted in IPFS and identified by a content hash which was recorded as part of the transaction which minted the NFT in a blockchain, which makes it somewhere between "difficult" and "impossible" for any third party (or first or second party, for that matter) to replace the content.