And they aren't going to act on a single hash collision. People who have these images likely aren't going to have one or two.

People can argue against this approach for privacy reasons, but I think the false positive argument is a relatively weak one.