You bring up a valid point. Presenting a picture as the only means for authentication removes the benefit of digitized confirmation. Pics on the app store link appear to show a clock of some sort over the picture, but even that could be easily recreated.