Apple already can run this server-side, on their own devices, and not by installing a backdoor on a device someone purchased.