What if they use advanced evasion techniques like printing it out and scanning it or taking a photo with their phone?

SynthID is fairly resistant to this sort of thing, although not perfect.