However if it came out that manufacturers were secretly storing a "fingerprint" of the noise profile of each image sensor and sharing it with the government, I'm afraid I wouldn't be entirely surprised
Remember https://en.wikipedia.org/wiki/Machine_Identification_Code
A much harder to break system is one uses a secret only exists on each individual phone + the generic algorithm that iphones use, but this comes back to individuals being traced.
There is actually a way to prevent individuals from being traced while having a strong membership proof. This can be achieved by issuing signatures on a relative generator created in an exponentiation mix together with a set of output pseudonyms. One can picture it as strands braided together where it is hard to trace the link between the input and output strands, while it is very easy to tell that such a link exists.
More on that can be found on: