Which answer accurately captures the iOS 'Sensitive Content Analysis' (SCA) feature introduced in iOS 17, and how does it relate to on-device data storage privacy?

• A.SCA uploads each photo to Apple's analysis cluster (the same pipeline that backs iCloud Photos deduplication), and the verdict returns to the handset within a second, because the Core ML models are too large to ship in the system image; the stored result is a server-issued token rather than a local classification
• B.SCA scans the Keychain for string patterns that look like stored passwords in plaintext (a regular-expression sweep over generic-password items), and it flags an app that keeps credentials outside the recommended classes, because Apple wanted a storage-hygiene signal developers could act on; the findings surface in Xcode Organizer, and nothing leaves the device
• C.SCA hands each detected photo to the Secure Enclave for re-encryption under a per-image key (the enclave returns a wrapped blob the Photos database stores in place of the original), and the user unlocks the image with Face ID afterward, because the framework treats a sensitivity verdict as an access-control decision rather than a warning; the analysis therefore changes how the file is stored