Client side scanning came out of the discussion around this bill the last time it was proposed. That it isn’t in this bill doesn’t mean it isn’t in politicians’ heads, and if this gets passed there is then significant precedent for extending it, as a small extension doesn’t seem as big as a full-scale government invasion of citizens’ privacy (i.e. this bill).
I don't believe the transition from "set up a commission to recommend best practices" to "mandate regular scans of everyone's phones and report the results to law enforcement" would be viewed as a small extension.