It does require invasive oversight. If I send a picture of my kid to my wife, I don't want some AI algorithm to have a brainfart and instead upload the picture to Europol for strangers to see and to put me on some list I don't belong.
People sharing CSAM are unlikely to use apps that force these scans anyway.