There's no risk to reputation. You get a massive rage boost then reveal that "a social media contractor used authentic crowd photographs in an unauthorized manner and is no longer employed by the company". You reveal the photos, everyone either celebrates the contractor getting canned or that this wasn't AI and you get huge lift.

People are suckers. You can tell them you are going to do this, do it, and they'll still fall for it. Don't tell them and they'll think better of themselves and of you for obeying them (cf fictional firing) and you're done!