And what if you take a picture across a IR-filtered window?

Then you won’t be able to prove it was a genuine photograph? That sounds like the right failure mode.