It's still a shade of gray to me. If I offered some homegrown cloud storage to my friends, and one of them uploaded CSAM to it, you can bet your ass that I would be arrested for it.
The law has exceptions for electronic service providers who report what they find on their storage. If you are operating a service for friends at no charge with no business plan you probably will have to work a bit harder to avail yourself of that exception. Might be best to charge a nominal fee and at least pretend to be doing it as a service provider.
