Perhaps the unspoken argument is that client-side scanning will be made into a best practice, and websites and apps that don't implement it will be exposed to liability.