As you say, perhaps a new photo, although what about taking a photo of one of the selfies in the stolen phone?

The real owner could take a picture of himself showing in a paper the most recent hash in the blockchain. But yeah, this system becomes more and more complex. So it is difficult to be 100% and more difficult considering the advances in artificial intelligence that will come in the future.