Public links are the one kind of iCloud share Apple cannot see. Starting with the next point release, it will. A support note published on November 3 confirms that items shared with “Anyone with the link” will be examined for harmful material on both sides of the handoff.
The change lands in iOS 27.3, iPadOS 27.3, macOS 27.3 and visionOS 27.3. It covers iCloud Photos images and iCloud Drive files, but only in that single share mode. Content sent with “People you choose” stays outside the check, because only invited accounts can open it.
What the silence around the policy costs
Apple’s document never defines harmful. It does not say whether links minted before the release get re-examined, or whether the classifier runs on device or on Apple’s servers. The only stated fact is that public sharing already strips end-to-end encryption, even for subscribers who enabled Advanced Data Protection. That was true before this policy and remains true after it.
Penalties are spelled out more crisply than the detection. Apple reserves the right to move, refuse, modify or delete flagged material, and to block or disable the offending account. It may also bar a new account tied to the same email address or phone number, and it says law enforcement involvement is possible.
Why scan something already exposed
An unlisted link is still a public URL. Anyone holding it, or finding it pasted into a forum, opens the file without an Apple Account. The missing encryption reflects that architecture, not a choice made this month.
The practical reading for users is narrow. If a photo or document must stay private, share it to named recipients, or send a copy through Messages. A public link should be treated as a publication, because after 27.3 Apple will read it the same way.
