I believe this is how many CSAM classifiers work. There isn't a simple legal avenue to host CSAM for classifier training, for good reason.