Comment by nullc

> once the system is created it’s easy to envision governments putting whatever images they want to know people have into the phone

A key point is that the system was designed to make sure the database was strongly cryptographically private against review. -- that's actually where 95% of the technical complexity in the proposal came from: to make absolutely sure the public could never discover exactly what government organizations were or weren't scanning for.