I ran a social media site years ago, had a few instances of CP where we personally notified law enforcement. It was taken care of, we got in absolutely no trouble. But it's worrying how inefficient the whole process is. Or at least was back then.