Maybe the implementation is difficult to put into layman’s terms, but the high level goals - scanning the devices for child porn - most definitely is not.

I’m not buying the “engineers were left unbridled” argument, I think there just have been a level of obliviousness in much wider a part of the organization for something like this to happen.