Often, despite all its disadvantages, on-device scanning would at least let know see what was being scanned for. But Apple have circumvented that with NeuralHa

Often, despite all its disadvantages, on-device scanning would at least let know see what was being scanned for. But Apple have circumvented that with NeuralHash. There's no way for the user to verify that only CSAM is being detected - which could be partially accomplished by having iOS only accept hashes signed by multiple independent child protection organisations (with some outside of FVEY).