Only if the trusted authority sends back a copy of all the details too, and person at the counter looks at those instead. Otherwise the altered app can show a

Only if the trusted authority sends back a copy of all the details too, and person at the counter looks at those instead. Otherwise the altered app can show a different photo to that which was enrolled, etc. The signature is on bytes, not the offline visual representation.