Apple could intercept hashes that are sent and compare to their own database.
Someone in the NCMEC could add non CSAM hashes to their database.