> IIRC, stuff uploaded to their cloud is already accessible to Apple for server-side scanning. The controversial thing was the on-device scans would trigger som

> IIRC, stuff uploaded to their cloud is already accessible to Apple for server-side scanning. The controversial thing was the on-device scans would trigger some kind of upload of un-uploaded stuff to Apple for further investigation. No, the stated behaviour was that it would be uploaded to the cloud at the same time as the encrypted image. Uploaded data was still "encrypted" "at rest" (but possible for them to decrypt, just not done routinely). The whole point of the client-side scanning was that scanning was done locally on the phone and uploaded with it, as an explicit alternative to them regularly decrypting and scanning all user data on their servers. The stated operation was; if the phone fingerprint matched a public CSAM fingerprint list, then it would be automatically decrypted and scanned with a second, private fingerprinting algorithm on the server - only if this second, private fingerprint matched would the data be flagged up for potential violation (and inspected). The alternative to this was them just regularly scanning all data in their cloud anyway. Apparently people are happier with that option.