> And the idea that the most valuable thing that an attacker — who’s undergone such an extremely difficult action as breaching someone’s device — was that they would want to trigger a manual review of an account doesn’t make much sense. [...] and that is something that we want to only occur in cases where it’s a legitimate high value report. We’ve designed the system in that way, but if we consider the attack scenario you brought up, I think that’s not a very compelling outcome to an attacker.
It seems that Apple considers that scenario unlikely, although I think it would make a lot of sense for an attacker to choose that avenue, since they get Apple to do the reporting for them.
However, Apple also claims that even if such scenario would happen, their threshold limits and manual review would make such attacks worthless, but they do not elaborate as to how those checks would actually filter out those attacks.