I think this is a serious question that needs serious thought.

It could be viewed as criminalising behaviour that we find unacceptable, even if it harms no-one and is done in private. Where does that stop?

Of course this assumes we can definitely, 100%, tell AI-generated CSAM from real CSAM. This may not be true, or true for very long.