Comment by quenix

This isn't even tied to iCloud, they can scan your device even if you don't use iCloud.

iOS downloads CSAM scanning code from Apple and runs it locally—hence, client-side tool.