[eivarv]

Legality aside – how is this not a privacy risk? Privileged users of the infrastructure can gain information about users (whether they possess CSAM that's in the hash-database... for now).

[tehnub]

Presumably the reviewers would not know the identity of the user whose photos are under review, as they have no need to.

[avnigo]

Unless you're a public figure or celebrity. If I were, I wouldn't use iCloud photos, but that's not exactly how Apple markets their photo service.

[eivarv]

... but the link between user and photo obviously exists somewhere in Apple's system.