Maybe they can offer a choice?
You can pick
a) no backups
b) iCloud backups with E2EE and privacy preserving CSAM scanning as suggested by Apple (private set intersection, half client side, half server side)
c) iCloud backups, unencrypted, with CSAM scanning server side (like all other cloud services)
I know what I'd choose!