The whole point of the system is to keep the photo off the cloud, to stop it being uploaded if it matches. If a number of photos match, Apple will conduct a human review, as the photo has not been uploaded to iCloud, remember the system has detected the photo and matched it, and it being designed to stop the photo being uploaded to iCloud, will not upload it, will then be scanned by a human review, on device.
Here is where you go wrong.
The system will not stop the photo from being uploaded even if it was matched. If they didn't upload it, it would be easy for Apple to determine you had CSAM images.
All photos will be uploaded to iCloud Photo Library if you have it turned on.