There isn't except going for server owners or infiltrating groups like they already do. Same can be said about encryption or even TCP protocol is being used to distribute CP. You simply can't add CSAM protection for everything, nor should you. That leads to a surveillance state.
It's an unfortunate byproduct of privacy that it will be used for evil, but that doesn't mean we get rid of security. That's how fascism begins.