> What do you think they were going to do once the scanning turned up a hit? Access the photos? Well that negates the first statement.

In the whitepaper, the cryptography required that Apple have multiple different photodna (or whatever the name was for the on-device one) matches before they could unwrap the user's message containing these suspected CSAM photos and to then send them to NCMEC.