It seems to me that the best way to counter this attack is to not accept ID photographs from the public, but instead require a government officer to photograph

It seems to me that the best way to counter this attack is to not accept ID photographs from the public, but instead require a government officer to photograph the person applying for ID.