I don't think you're correct -- the phone uploads security vouchers from photos, any photos, to Apple's servers. If enough of the vouchers match the image datab

I don't think you're correct -- the phone uploads security vouchers from photos, any photos, to Apple's servers. If enough of the vouchers match the image database, Apple can decrypt the vouchers to a low-rez version of the photos. Apple says this would only be used on iCloud synced photos, but I don't see any technical reason the process could not be performed for any photo. Am I mistaken? > The device had no knowledge of any matches. True, but how is it relevant?