Facebook's policy conspicuously lacks any definition of CSAM.