IANAL, if subscribers had a decryption key, and the instance only stored encrypted copies of the media, would instances still be liable? Kinda-sorta like Tor relay-only nodes; it seems like only exit nodes get in trouble.