If you’re doing data recovery for a large enough tech firm (such as Best Buy’s Geek Squad service, you may be a mandated reporter of CSAM that you come across, depending on your state and the policy of your company, but in that case the CSAM in question is probably pretty obvious, either labeled as such or the first directory you hopped into.

id est, not because you scanned the drive’s unused blocks specifically looking for it.