The first is arguable and the second inaccurate, but...It's not 'spyware' then, it's scanning things in iCloud accounts.
I agree with this ^^^^^I'd think Apple would have to be completely insane to carry through with that now.
Not that they won't, eventually, but it would be insane to try to slip it in surreptitiously with this security update.
That being said: This update was in the "news" this evening. My wife: "You don't supposed Apple would...?"