> a camera sensor could be designed such that every image that is captured on the sensor gets signed by the sensor at the hardware level

A hardware-based private key like this will inevitably be leaked.