You should note the fact that everything on closed systems is based on trust. Apple has had always the opportunity to look directly on your phone. That does not simply change overnight when they add some feature. And currently they scan only those images on-device, which would end up into the cloud. You can avoid this scanning by not using iCloud.
The feature what everyone is afraid of (scan all in my device), is super trivial to add generally. Company like Apple can push it to public in less like week regardless if this Child Safety came first.
This new feature is actually really hard to develop, because they try to create E2EE system with backdoor. And they want to lock themselves out of this backdoor to prevent misuse.
