One can indeed copy the art and re-mint a new NFT but a single click on the user profile will reveal it’s not the authentic one.
e.g:
Click / Tap on the profile picture to see NFT provenance info
you think there is a central authority deciding authenticity?
Makes you wonder if they should have just used a centralized ledger in the first place if this was going to be how things are run.