This seems like a liability nightmare. If they're just scanning all the image files on people's devices and using them for training, they're inevitably going to scoop up nudes without permission, not to mention the occasional CSAM or gore photo, right? Why would you want to risk having stuff like that sneak into your training set when you already have access to all people's public photos?