What role does the deep fake play?
It is not clear exactly what the deep fake is doing here. Is it just about the ethnicity of the applicant, in that the company would not employ someone who looks Korean or whatever? Or is this pretending to be actual people who put their real identifiable photograph on the web (seriously, who does that in this day and age of scammers scraping the web for photos)? If you are giving out security information just because an applicant looks a bit like a picture on the web deep fakes are the least of your problems.
It seems like if this is a security hole then it has been created by the companies for no good reason.