> Once a hash matches, law enforcement would need a subpoena to access the raw image.

Not if Apple provides it to them without a subpoena.