IIRC, Apple was already scanning iCloud server-side for CSAM [0] so I'm not sure if that excuse holds.
[0] https://www.macobserver.com/analysis/apple-scans-uploaded-co...
[0] https://www.macobserver.com/analysis/apple-scans-uploaded-co...
Or does that include ancillary data like images in iMessage chats (even if you have iCloud data basically shut off)
I read the scans were done on device but prior to upload. Just unclear what that really means to me.