They're doing it clientside so that they can do it for images and files that aren't ever sent off the device.

I am increasingly convinced this is a backroom deal, just like the iCloud Backup e2e feature (designed and, as I understand it, partially implemented) being nixed on demand (but not legal compulsion) from the FBI.

If you get big enough, the 1A doesn't apply to you anymore.