If an app vendor e.g. Signal shipped client side scanning in the app store they would have to compromise all users and I suspect we’d find out relatively quickly. The reputation loss would be permanent.

My main concern with the current chat control bill is on the age verification. With open source OSes that don’t enforce Google’s policy users could still side load APKs of forks w/o age verification.