Placing the url at the bottom is brilliant UI wise considering the height of the average smartphone nowadays. And anyway they made this an option for those who wouldn't like it. The “mess" that was discussed in your second link (the hovering URL bar) was only present in beta version and has been removed from the release. Finally, CSAM scanning has nothing to do with OS security, but with privacy.