There’s some irony here

According to GrapheneOS, a security-oriented Android Open Source Project (AOSP)-based distro: “The app doesn’t provide client-side scanning used to report things to Google or anyone else. It provides on-device machine-learning models that are usable by applications to classify content as spam, scams, malware, etc. This allows apps to check content locally without sharing it with a service and mark it with warnings for users.”

So the headline is wrong too.