This isn't even tied to iCloud, they can scan your device even if you don't use iCloud. iOS downloads CSAM scanning code from Apple and runs it locally—hence,

This isn't even tied to iCloud, they can scan your device even if you don't use iCloud. iOS downloads CSAM scanning code from Apple and runs it locally—hence, client-side tool.