Earlier quoted context omitted.
Do you think Google doesn't scan photos uploaded to its cloud services for CSAM?
Don't move the goal posts. On-device scanning has a qualitatively different privacy impact from scanning photos inside cloud storage.
'scan -> encrypt -> upload' is in my opinion better than 'upload -> scan'