Something the whole Apple kerfluffle has revealed to me is how many services were already scanning for CSAM in the cloud and reporting to authorities. E.g. Google, Facebook, Microsoft. I consider myself tech-literate and had not known about this.
Are there other types of material or kinds of activity that cloud services might already be scanning for, but might not have much public awareness?