[noptd]

>In Apple's implementation, the device never knows if a particular picture is a CSAM match.

That's a distinction without a difference w.r.t the end result but I'll offer a more apt analogy regardless.

A better analogy would be the police installing a device in your house that's capable of seeing or hearing anything that happens and then claiming there's nothing to worry about. The device is only watching a specific door in your house and forwarding a hash of that information to their servers. Nevermind that it would only take a policy change and an OTA update that you have no visibility into, or chance of blocking, before it's watching your entire house in real-time.

But hey, you have several other doors to enter or exit your house from, and it's not like the camera actually knows anything, only the people on the other end do, so what's the big deal right?

Would you trust the police in that scenario?