Your own links talks about how perceptual hashing hasn't been proven to be robust enough for this use case, and also introduces a new problem: Hash collisions, such that you can generate images that hash to the same perceptual hash as an illicit image.

Robust or not, it's a little more nuanced than a file hash that goes out the window because a single pixel changed, as implied by GP.

Yes, I did some more research on this as well. Apparently perceptual hashing is also susceptible to some pretty simple attacks:

https://arxiv.org/pdf/2111.06628.pdf