Yes, and the people checking the painting could fraudulent.

Using a blockchain does not prevent:

Events that are happening that are not registered
Events that didn’t happen are registered
Wrong events are registered

So far the only ‘reasonable’ use case seems te be cryptocurrency, as long as nobody controls more than 50% of the chain. Then still I don’t get why entries in a secure distributed database should be worth anything. Anyone can start a coin or a fork of bitcoin, so why do they have value at all?