Indeed, on top of Google's implementation being a bad joke, it sounds like the C2PA specifications in general are a massive fail so far. https://arxiv.org/html/2604.24890v1

On the other hand, ignoring standards altogether is the wrong way to go because the ecosystem after capture won't be there.