In some cases, such as as for stalkerware, or in cases where legal action against the surveillance is possible, we should add additional guarantees to help victim have a chain of custody and some basic technical guarantees about it.
For instance, we could provide optional cryptographic timestamping for acquisitions, via either a TSA, or as @TheZ3ro suggest via the existing Certificate Transparency ecosystem, or even via other means. Needles to say, this is quite down the development priorities.