It isn't.. but here in reality they're forced to respond to requests by law enforcement for things such as CSAM -- this is the problem they were trying to solve with the on-device scanning. The plan was this would allow for backups they would not have a key to, and thus be unable to respond to law enforcement.