Lemmy’s security has more holes in it than a piece of Swiss cheese

This has very little to do with security. There’s inherently “insecure” about posting CSAM, since the accounts and images were likely posted just like any other.

What really needs to happen, is some sort of detection of that kind of content (which would likely require a large change to code) or additional moderation tools.