The fun thing is, that those filters cannot work.
The request begins with a normal looking https request to a non illegal (DNS) server. Then comes the secure handshake with one of the many cloudflare IPs and then the connection goes on like that.
The only way of stopping or recognizing this traffic at this point is via the IP. So they would have to ban all cloudflare IPs to block that and no western politician will survive that.
Those filters would only work on small sites that don’t use cloudflare, since then you might have a small number of static IPs.
And they way to report illegal sites is there. You just write cloudflare and they will most certainly deal with the CSAM.