They use MD5 hashes of actual child abuse images, which is a 100% match, or PhotoDNA which is a fuzzy match but quite precise I guess. I would be much more concerned about "demands creep" so you start from child abuse and end reporting pirated movies or apps simply because the feature is already there.