Those images are hashed, not transmitted in original format. On top of that, PSI prevents you from learning those hashes, or how many there are. So you can’t tell if the database contains the hash of, say, tank-man.jpg.

I understand why this shielding is necessary for the system to work. My point is the crypto is being used to protect law enforcement, not the user.