but then how does the AI scan your private images without permission to detect real CSAM, AI imagined CSAM such as medical images, and random pictures of cantaloupes and the like?

perhaps they just mean "end-to-end encryption*" where the * represents the back door that only apple and various three-letter-agencies have access to.