The described scheme links the image to the device's signing key > There's no way to link a reference image to a person; it's also not possible to determine if

The described scheme links the image to the device's signing key > There's no way to link a reference image to a person; it's also not possible to determine if a pair of images came from the same device. How would they do that ? There is only one signed key of the device