In the press release Apple says they are using hashes of hashes.

Apple has no visibility into the original image that generated the hash, so the gov can compromise the list at the source and Apple would have plausible deniability.