^ Heading off the people who might say, "you have nothing to fear if you have nothing to hide":
Databases are not perfect. False positives happen. It's one thing to make that mistake and manually review on a cloud account. If a personal device gets flagged though, that can lead other places.
This also reminds me of the arguments LEOs make for encryption backdoors.
To be clear, I absolutely support Apple scanning the hashes of everything in iCloud, since Apple owns the servers. I simply think that if scanning is taking place on a personal device, then it should require a court order.