Signing doesn't really achieve anything when an attacker can manipulate the device into signing arbitrary pixels.

Nobody knows how to make a camera that can distinguish honest vs deceptive photons.