Pretty sure the agreed upon method is the review goes thru Apple and then to the Center for Missing and Exploited Children, who host this list of hashes gleaned

Pretty sure the agreed upon method is the review goes thru Apple and then to the Center for Missing and Exploited Children, who host this list of hashes gleaned from images. Also, this has already been done for years by every single cloud service in existence. Apple came up with a way that preserves privacy and suddenly everyone's a privacy expert based in the reality of CSAM.