Hi Mark,
Thanks for your feedback. I would forward your product feedback to product team. For now, the service would not differentiate between a high quality photo or a live image. Therefore, we do not recommend the service as a single form of authentication. There are 3 ways I heard to help but not easy.
1) Some customers have tried capturing multiple frames to verify that it is not a still image.
2) There is another Recognition API from Microsoft which can detect objects. I've tested and it can detect if there is a cellphone in the picture. (If you try to access with the picture in cellphone). The problem is if you try to access with the cellphone and you can't see the border of the cellphone.
3)You can ask the user to do some random actions like close left eye or smile, or something like that. And you will get this in the second face detection.
Regards,
Yutong