Yeah they retracted the plans to scan locally on device as I may remember. Somehow, I remember it as being reported exactly in that connection "csam & on device" before imgvideo-files are being sent and encrypted in messengers. Intercepting later can't be easily done.. They retracted and said after criticism "we do it on iCloud".

Then a link to be found on goog or few comments further down, says, they wanted to do it on iCloud. But everyone is going rage mode. So they retracted and wanted to do it with more "privacy" on device.. and then, the link also say, they created an API to filter what for example kids should not see or send and app developers can use it.

iCloud scanning is ok with me and my privacy advisor. There are bad guys out there.