> there _is_ an argument to be made about a system like this being used to track the spread of political material

How so? Unlike other cloud providers, which do scan all uploaded images server side, this system is specifically designed to prevent this.

(As you say, if Apple is entirely compromised, then all bets are off anyway.)