That’s the plan. Attack subject that are traditionally seen as taboo/sensitive/whatever, then extend. CSAM content, porn in general, even random bulletin board with cringey content these days, are used as the entrypoint. You target those, people are wary about defending their rights because of the flagship topic, so laws are changed to put some extra layers of tracking, surveillance, etc.

Step two is claim whatever site/service the current government dislike falls under an imaginary category that allows using these layers of surveillance. And these are extra hard to remove once put in place, because nobody wants to break their surveillance toy.

It’s never about the porn, it’s never about the kids, it’s never about our security when a proposal shows up and talks about breaking encryption, privacy, etc.