How so? Unlike other cloud providers, which do scan all uploaded images server side, this system is specifically designed to prevent this.

(As you say, if Apple is entirely compromised, then all bets are off anyway.)