If they’re spending millions on faking an image, okay fine. That’s clearly not the security model intended for this feature though.

How large and pixel dense does a display need to be for it to convincingly fill an image sensor?

I suspect it’s significantly less than millions.