Comment by ustad

You're extensively describing the technical implementation while missing the fundamental issue: Why is Apple enabling this feature by default for what is, essentially, a luxury photo search feature?

Let's break this down:

1. Nobody is questioning whether Apple's technical implementation is sophisticated or secure. It clearly is.

2. Nobody is suggesting the privacy toggles don't work. They do.

3. The issue is about Apple deciding that automatically sending data about users' photos (regardless of how securely) is an acceptable default for a feature many users may never want or need.

Consider the value proposition here: Apple invested significant engineering resources into complex homomorphic encryption and differential privacy... so users can search for landmarks in their photos? And they deemed this feature so essential that it should be enabled by default?

This feels like using a golden vault with military-grade security to store grocery lists. Yes, the security is impressive, but that's not the point. The point is: Why are my grocery lists being moved to the vault without asking me first?

A privacy-respecting approach would be: "Hey, would you like to enable enhanced landmark search in your photos? We've built some really impressive privacy protections to make this secure..."

Instead of: "We've already started analyzing your photos for landmarks because we built really impressive privacy protections..."

The sophistication of the technology doesn't justify making it the default for what is ultimately an optional convenience feature.