This is right. It actually made me wonder how likely it is on xmpp.

Because in public rooms talking about whatever android app all of a sudden you could have some rando come in and drop csam and leave. Then they propagates and Im not sure if the deletion does or not.

Real big issue IMO.