So the other explanation is that apple announced a few years ago that they were going to scan people’s devices for known CSAM hashes and report any matches to authorities.

This was only for icloud photos, and the reason they were considering that was to keep your photos encrypted in the cloud. this way the photos are analyzed locally on your device and kept private, unless they are found to be problematic obviously.