If you were the one hosting it on your own server and storing CSAM that people were sending, yeah, you should be arrested. Nobody cares if you upload a messenger to github, there's scores of them.