What I'm saying is that a whole bunch of stars need to align before any practical use for this exploit becomes even remotely plausible. This is slightly more likely if your adversary is a state actor with strong motivations and no issues accessing and handling CSAM. But consider the necessary steps and ask how likely it is:
1. Hope that your client uses an iPhone, pays for iCloud storage, and has enabled the cloud photo library feature, not on by default.
2. Acquire the NeuralHash and secondary hash for thirty A1-class images in the CSAM database.
3. Acquire the secondary hash algorithm and build a tool that generates hash collisions for that.
4. Find thirty images which have even the most vanishing small hope of being accidentally identifiable as CSAM by a human reviewer, and that your target would like so much that they'd be inclined to import all thirty into their iCloud Photo library upon receiving them.
5. Mangle these thirty images to each match both hashes. But without mangling them so much that the target's desire to import them into their iCloud photo gallery diminishes, whether for aesthetic reasons or because the target becomes suspicious.
6. Hope that your target does actually import all thirty images into their iCloud photo gallery.
7. Hope that your hash collsions all work correctly in practice.
8. Hope that Apple's human reviewers screw up.
9. Hope that none of the 30 images cause any of Apple's reviewers to become suspicious, flagging the matter for technical review, causing Apple to blacklist these hashes and rev their hash algorithms in the next version of iOS.
10. Hope that the child safety organisation which Apple reports this to also screws up.
11. Hope that the law enforcement body which this child safety organisation reports this to also screws up.
12. Hope that bumbling actions of law enforcement cause desirable negative consequences to your target.
That's a dozen steps, many of which are exceedingly non-trivial. There's probably a dozen more steps I'm missing or unaware of.
Upshot—a lot of work for very little outcome. Far more effective would be to break into the guy's house, stuff some printouts of CSAM under their mattress and then make a bunch of anonymous tip-offs to local law enforcement. Or just pay a guy to shoot him.