[dwaite]

> They’re already scanned on iCloud

They are not. Other file and photo hosting platforms do not encrypt the data, so they are able to scan server-side. The content is encrypted for iCloud, and the encryption keys are not known by the hosting infrastructure.

This means as an example that shared iCloud albums could be used as a distribution mechanism for child pornography, operating silently until one of the members' accounts gets subpoenaed or they confess and share the list.

[threeseed]

Apple uses AES encryption for iCloud Photos: https://support.apple.com/en-us/HT202303

Underlying cloud providers that Apple uses e.g. AWS may not have the key but Apple definitely does. And that key could be embedded in a CSAM detection app.

So unless you work for Apple and have definitive proof that they do not have such an app I think we should assume they do.