Medias are only hosted by the instance from which the poster is, specifically for this reason. So if someone spreads CSAM on another instance into yours, the only mirrored content is textual but not the offending material