think the most likely scenario is when the pool is a miner and produces fake shares.
Exactly this.
Recall also that this issue affects also standard PPLNS and has nothing to do with job declaration.
You’re right, the issue I describe is orthogonal to this proposal (which I like a lot!).