Tl;dr: give up on the arms race trying to detect fake images, and start using C2PA to show which images are provably non-fake.