It feels like they are getting new photos more often lately. When the scam first started they used the same like two photos a lot. Now it feels like there is multiple new photos just this week.
Yeah I can see blocking text, but you are saying the new images are possibly to avoiding blocks. Which would require some image comparison / computer vision based detection, which I would be interested to read about if it existed.
It was a guess. I know pictrs has some functionality for that to block CP being uploaded to Lemmy instances, maybe look at the repo, that should have some info :)