[zepto]

> This is a new mechanism for scanning private pictures on the device.

No it isn’t. It’s a mechanism for scanning pictures as they are uploaded to iCloud Photo Library.

Private pictures on the device are not scanned.

[fsflover]

Pictures not uploaded yet are private.

[zepto]

Not if you have opted to have them uploaded.

[int_19h]

Cloud backups are the default on iOS, so you rather have to opt out. And that doesn't even account for apps that can do the same.

[zepto]

iCloud backups are not scanned.

Also, what apps are you talking about?

[int_19h]

Photos that are automatically uploaded to iCloud are not scanned?

As for apps - WhatsApp, for example, saves everything to Camera Roll by default. Which then gets auto-uploaded to iCloud.

[zepto]

> Photos that are automatically uploaded to iCloud are not scanned?

iCloud backups are not scanned. Only photos uploaded to iCloud Photo Library.

> As for apps - WhatsApp, for example, saves everything to Camera Roll by default. Which then gets auto-uploaded to iCloud.

This is not true at all. The user is asked for explicit permission before apps can save photos to the camera roll, and the user must choose to use iCloud Photo Library.

[simondotau]

If your device generates a safety token and it's never uploaded anywhere, that's a no-op.