Apple's goal is not to fight all CSAM on iPhones; Their goal is to keep it out of their servers. A criminal could bypass the iCloud-related checks, but they still have to contend with similar measures taken by video- and file-sharing services.