Apple shoving this false dichotomy at us is the problem. I choose option #3 - Apple (et al) freely scan everything stored in their cloud, while users' devices use encryption that renders most scanning moot.