One problem is, the CSAM database he talks about is from the US and not managed by Apple. What if another country requires to use a different database and requires to put in other in this country "legally compromising" images? Who audits this? Apple in the respective country? Who will even get notified about this?