Is this just a pandora box where all files are scanned and checksummed'd and then uploaded to a central server? Would it tie into CSAM for apple devices? They

Is this just a pandora box where all files are scanned and checksummed'd and then uploaded to a central server? Would it tie into CSAM for apple devices? They say PUP, but what if it's politically unwated files and they wanted to discover the creator of a file/photo? North Korea is criticized highly for pushing watermarking in it's nix distribution, but the way Microsoft Defender works for enterprise is that you have an agent on every PC, which scans all files - and that can be a "canary" for files being modified / searching the org at once for a specific hash that means you're infected or not (yes, it is trivial to pad bytes to change the checksum string, but still) I do not know about how MAc OS does is scanning, or reporting, but that is the biggest thing I'd be looking for - we already have gatekeeper that keeps unsigned apps from "easily" being run, or even self signed/unwanted signed apps from easily being executed which operates on a checksum basis. Is this next?