I did the same and I agree with you with one small caveat. For someone like me, who does not use iCloud or any other cloud service, on device scanning seriously compromises my privacy. I want to be clear that I am not doing anything that is currently illegal in my home country, but that could change under a more oppressive government. I know my opinions would definitely get me in trouble in some countries if I happened to live there.
> Of course the best option is to not scan at all, but that is not really option.
Why isn't it an option? I know of no legal requirement anywhere that mandates Apple has to scan fro CSAM.