And you're correct. In its current description, it's fine.
Then let's stop the scaremongering about what hasn't been done, as if this has somehow created that opportunity where it didn't exist before. That isn't the case, the technology required for some forced mass surveillance was not developed by Apple for this feature. It has existed since it has been possible to compare image hashes with computers, before Apple decided to use it to protect children from abuse.
The concern here is for the potential for abuse. Because Apple *will* bend to the will of the government; whether it's ours or Chinas or whoever's. They already did, by agreeing to give China access and control over the iCloud servers in China, and guarantee that all Chinese citizens will use the Chinese controlled iCloud servers.
What happens when China passes a law demanding that all anti-regime propaganda is illegal, and demands that Apple now scan for that illegal propaganda? What happens if the USA, through the Patriot Act, demands that all terroristic propaganda stored in iCloud is also illegal, and shall be scanned and watched for?
It's not a big leap to include non-CSAM hashes in their hash database....
It's not a big leap from iOS 14 (
not having this feature) to that. Nothing about government forcing their hand has anything to do with
this feature. Some government could demand that regardless of Apple implementing what they have so far. I.e. some government could come around and demand that they do exactly what they have proposed to do - see, it makes no difference.
Do you understand now why it could be misused?
No. Because the misuse does not require this as a first step. It can be done all together if this feature wasn't already there. This feature doesn't change things.
Stopping child porn = good idea. Stopping pedophiles = good idea. Agreeing to surveillance of a billion users "Just in case" = bad idea.
As you agreed, "In its current description, it's fine." In some other form it is something else. This "fine" feature hasn't suddenly enabled some other form that we all agree is a "bad idea". That bad idea feature was always possible before this feature. The argument that this is a step closer doesn't hold up. If some big bad government has to take two steps instead of one to violate your rights, they will.
Edit:
I should add that governments have already done things like forced copiers to not duplicate currency accurately, and printer manufactures already add micro dots that can trace your printouts back to your particular printer... all sorts of scary stuff that uses your own devices to violate your privacy started happening a long time ago. This isn't an instance of that, and if you are worried about that happening you are years too late.