https://www.politico.eu/article/europol-data-processing-reform-privacy-risks-edps-warning/

BTW Europol officialy wanted the chatcontrol scanning to include anything "useful", not just CSAM. I'm sure nothing has changed since.