> So whenever you send anything to example.com you also send it to government-snooping-service.org?domain=example.com.

No, it's client side scanning - you have a database with bad material / a neural network trained to detect such material. Only when it detects a positive match, it will contact the government server.