Yes. If you use iCloud Photo Library then CSAM is scanned server-side.
Same it has always been and no different to every other service.
Same it has always been and no different to every other service.
Also any kind of content scanning is always strictly worse than no scanning at all.