If you call 'client-side scanning' something like 'upload moderation,' it still undermines privacy, security