It's easy to copy EXIF from an SOOC JPEG into a highly processed one, changing the times in file attributes are easily done too (In it's crudest form just by adjusting the computers time & date...) Such things can possibly be detected by careful analysis of the datafile but will pass a quick check.last modified time vs. capture time.