OP, IMO either their photographic evidence confirms it's your VRM or it doesn't.
If it does, then they're obliged to send you these photos because according to DVLA you're the keeper and it's your 'personal information'. If this occurs then you've established that your car has been cloned.
If it does not then, as observed by others, they should not send these photos because they are not and never were your 'personal information' and cloning doesn't arise.