It at least looks like apple is the last one to do this. google, flickr, facebook, twitter etc did this since forever.
Almost like Apple was the last holdout to not give up customers’ privacy, and eventually had to cave. So they came up with a sophisticated system to handle the scanning on-device, and only for data that’s already destined for their servers.