Understanding the CSAM Scanning Tool

With the current news cycle, I assumed this was cloudflare's tech peeps explaining how the apple csam scanning works. Sad/funny that any posting "the csam scanning tool" this week/month - I and maybe many others will assume it's about apple. Suggestion- change the title to "cloudflare's scanning / reporting of your internet traffic' - or something like that.

I gotta say - it would be good if someone could provide access to a lawyer via video conference, especially with this:

"You likely have an obligation to securely preserve certain information related to your report for at least 90 days in the case of an investigation. To ensure that access to the content is limited, take care not to store this information anywhere accessible to anyone but those within your organization responsible for legal requests. "

I mean - if you are located somewhere where this is required by law I guess you have to do it. But if you are somewhere where this it not required by law and you do it - then you are doing something that is very against the law (?)

If you all are going to reporting people and organizations for user generated content that could get the people and organization in some sort of double jeopardy with legal crap like this, I think it's time to start providing some legal counsel or something.

Is there a list of places that get into these requirements? countries? states? does it become a thing if you are hosted in place X and you have headquarters in place Y and you have staff working in place Z?

It's also not clear to me if the cloudflare auto-firewall blocking is set to block a url of a web page, or a whole web site, or the url that would be in an <img tag> or what exactly.

Suggest posting about false sense of security - as I think 'enabling this' via cloudflare some might feel they are protected from having thing posted.. but does this cover cartoons that are questionable for example? and from my understating these hash things would not cover newly created csam that has not been 'discovered and catalogued' by the nicmec, so it may be helpful, but it's not a blanket protection tool (right?)