That’s not my interpretation of the first party descriptions of the CSAM system. Clearly it works if photos are encrypted; nothing implies they’re using that capability yet.
If that were the case, this would not merely be a PR mess but PR malpractice of an entirely other, novel kind.