I stand corrected, they do have e2ee but not in Photos/iCloud at this point. Then I suppose the only reason for them to have gone for all this complexity is to invalidate an excuse law enforcement could use to access user data left and right. (LE: Show us all the photos so we know who’s bad! A: We have a reliable system that auto-reports, see paper, therefore this is unjustified and we’ll sue.)