Not sure what brought to the conclusion that "medianalysisd running" => CSAM. Article is a bit on the trashy/alarmistic side IMO with no concrete or technical evidence whatsoever.
I think sending a one-way encrypted hash of a file, a la PhotoDNA [0], is a fair compromise. But if Apple is outright uploading your entire photo library for “analysis” without an explicit opt-in, that’s a different beast altogether. And if Apple today isn’t using this for surveillance, Apple tomorrow may be.