Solution: make the portions of a company that deal with/offer E2EE and those that don't separate entities.

The bits that are E2EE don't need immunity because they don't make CSAM available online. The other bits get immunity because they don't do E2EE, which is fine, because that's the way it currently is.

I really don't see the point of this.