“.. the right solution may be through regulations.”

I’m unclear, are you saying that regulators should prevent Apple from doing client-side scanning? If so, that’s entirely unrealistic. Government regulators would love to require even more intrusive capabilities.