> No, only the ones designated for upload to iCloud.
How do you verify that?
If Apple really is trying to sneak in a CSAM database on your phone with iCloud disabled, someone WILL catch it and raise so much hell we'll all hear it.