The rules aren't "never have bad things on your site" though. The example of "medium risk" for CSAM urls is a site with 8M users that has actively had CSAM sha

The rules aren't "never have bad things on your site" though. The example of "medium risk" for CSAM urls is a site with 8M users that has actively had CSAM shared on it before multiple times, been told this by multiple international organisations and has no checking on the content. It's a medium risk of it happening again.