“There is no independent way for the service providers or the devices to verify that the fingerprints in this data actual correspond to CSAM.”
The EU’s client-side scanning plan asks every phone to trust a central database of fingerprints nobody can audit. Researchers already reverse engineered PhotoDNA, and published work shows how to craft an image that matches any target fingerprint. Anyone allowed to submit entries can slip in a fingerprint for a protest flyer disguised as abuse material. Nobody would see the scope widen, because the database is secret by design.