How is this scenario unique to Apple but not everyone else who does scanning? e.g. Google, Facebook, Microsoft etc...
You can whatsapp someone an innocent image doctored to have a hash collision with known CSAM. If they have default settings it will be saved to their photo reel, scanned by iOS and the police will be called.
Until the arresting police officer explains to them they are being arrested on suspicion of being a paedophile, they won't even know this has happened.