While local, on-device content access has no such guarantees - it's a question of policy rather than technical infeasibility.
And policies change.
> They are scanning files that are being uploaded. So, yes.
Even considering the situation as it is today, the cloud providers (as well as Apple) are scanning just the files that are being uploaded. So I'm still not sure how one is "total invasion of privacy" and the other "preserving privacy".
No, the OS can limit access to local content. E.g. Mac has https://support.apple.com/guide/mac-help/control-access-to-f..., and ios has its own permissions system.
It also requires installing third-party software on the device. While if Apple's policy regarding local content changes in the future, there is no way to avoid the OS itself (other than jailbreaking I suppose).
> Apple is trying to avoid scanning in the cloud so that the data can be E2EE
Citation needed.