Examining Google's C2PA Content Credentials: A promising trust mechanism or a new form of surveillance?