Fortunately, it seems that matching is split between client-side and server-side, so extraction of the database from the device will not easily enable generation of matching images.

https://www.apple.com/child-safety/pdf/CSAM_Detection_Techni...