C2PA metadata may be stripped during cross-platform dissemination, legacy content cannot be retroactively signed, and a balance must be struck between privacy and transparency.