Excellent point. The messaging triggers for nudity in child accounts would imply that there is a separate, on-device scanning capability that has nothing to do with hash matching. Taken together with the backdoor for data exfiltration, and considering these come in the same announcement, there's no reason not to consider them part of the same spyware framework.