From that description It sounds like the Orbs are inherently trusted components of the system, i.e. if you can get your hands on one (and their cryptographic ce

From that description It sounds like the Orbs are inherently trusted components of the system, i.e. if you can get your hands on one (and their cryptographic certificates), or even remotely access one (through some vulnerability) then you could create as many "unique" identifiers as you want, without necessarily taking any picture. If that is so, how are you supposed to trust that in the thousands of Orbs necessary for this to scale, none of them have had their certificates compromised (either through physical or remote access) and that the currency is not being inflated at will (i.e. value is being stolen from current holders of the currency)?