> Considering the amount of ads they handle that seems... reasonable?
Why reasonable? Don't these ads pass through pre-publication review, and Meta makes money off of it? Any number above zero is a serious problem. If they can't run an ad business that doesn't publish and profit off of CSAM, they shouldn't run it.
I don't think we should distinguish between 'fake' and real CSAM based on if kids are hurt; this ad machine shouldn't be able to publish it, regardless. The moral question of if it's real seem separate to me.
I recall YouTube was hijacked to show multi-hour ads during the pandemic. These are imperfect systems that can be abused at any scale.
They identified them after the fact and appear to have disclosed that. This is what they needed to do to be able to be held accountable and to do better detecting them in the future.
I block ads and ad services at the device and network level and don't use any Meta services (outside of facebookresearch models), so while I'm fortunate not to have been able to be served any of these, it's also kind of unfortunate that I'm in a relatively rare category to know to report them and how.