The veto system would have to require that the equivalent of Russia and China's NCMEC agrees that the image/video's signature that's going to be included in the database is actually CSAM at a low level operational level. Without that consensus, it should be technically impossible for anyone to include a signature.