Your comment confused me. Isn't Apple still scanning iPhones for CSAM just not the iCloud? I don't see any additional threat vectors by doing it locally.