It's not matching an AI's interpretation of "is this a naked child?" though - it's specifically only matching perceptual hashes against a known database of CSAM percpetual hashes provided by NCMEC which will then be manually reviewed if there's more than a threshold of matches.
What's stopping said people from leaking photos?
No? Not unless they're matching the perceptual hashes of the CSAM provided by NCMEC and in that case, sorry, my sympathy does not extend that far.
If anything, this makes it harder for random Apple people to look at your iCloud photos if moving the matching step down to the phone means iCloud photos are going to be end-to-end encrypted, right? (Which is not a given, of course, just a theory that some people have about why it's moving down to the phone level.)
You trust automated systems more than I do.