It seems like the simplest solution here would be to not ban accounts automatically for CSAM detections, but to have a process to do so based on police recommendation.
Clearly Google already has a process to escalate detection to the police so banning the account based on what happens there doesn’t seem like a big leap.