So far the biggest issue is if the camera is angled oddly away from the user (basically, outside the 20 degree observable FoV). Another issue would be if they manage to install a larger camera that returns larger reflections (which we filter out).

Regarding using the app to check, I guess that applies for the existing handheld detectors as well. It's definitely something that intelligent attackers can try to plan for, but we havent tested the adversarial robustness of the system right now. That would be a very interesting direction for us as well.