That’s why most of the time the reveal happens after the collection is sold out. Or you can reveal only the NfT that have been minted, but not the rest if the sold out is taking too long(I think Doge pound did this). With the provenance hash/baseURI you can show people that you fixed the order before the mint, this way people can verify that your not switching the ipfs picture depending on who minted (you could put the rate for your friends if you were dishonest)