CSAM investigation is used as the rationale for all sorts of unrelated searches, see the grapheneOS duress password case where they took a protestors phone because they made up that they were investigating CP
AFAIK most real CSAM cases don't even need an "investigation". You look at the website and go "yup that's a minor" and then you take it offline.
AFAIK most real CSAM cases don't even need an "investigation". You look at the website and go "yup that's a minor" and then you take it offline.