I'd rather prefer server side than local device scanning. What prevents CSAM from being compromised on the device by a rouge state actor to smear and false fla

I'd rather prefer server side than local device scanning. What prevents CSAM from being compromised on the device by a rouge state actor to smear and false flag opponents ???.