He knows they can't do it server-side with E2E. That's his point. Apple can scan my encrypted files all they want.