You are legally (and imo also ethically) obligated to scan for and report CP

Don’t want it? Don’t host shit, or reduce the risk significantly (paywall).

Also, you release any expectation of privacy if you use a media host meant for public usage nostr:note1la533qs9pdg7wp75t8c4mmxa98flm0m4dfzk2rgehnemg0h9pjtq3p56kn