MFA will soon no longer protect you from phishing attacks. A new class of phishing technology will be able to bypass MFA.
Very soon, no videos on the Internet can be trusted. The software tools to produce audio/video Deep Fakes are EASILY available and CHEAP.
Maybe this CSAM scanning controversy is a necessary evil that is a precursor to implementing something big that will further enhance Apple’s privacy image?