plausible deniability might matter more than unbreakability in the real threat models people face. if they drag you into a room and ask you to prove the image is clean, no amount of AES will save you. but if the message is just one possibility among many? that's a different story. you're not hiding the secret. you're hiding the fact that there even is a secret to hide.