I think that they can do that is the problem, though? If you don’t like the way Google is running things, you can swap out the OS on your Pixel for one of several open source privacy-focused Android forks. But if Apple does something to iOS you don’t like, you’re stuck with it.
That's got nothing to do with CSAM, or this change and isn't anything new. If we're going full tinfoil, Android manufacturers could force update, lock down or brick your Android phone any time they like anyway. If you allow remote updates, which I think we generally all want for security updates, it's all about trust.
