I read the law and you are correct, there is explicitly mentioned that provider is not required to enforce seeking of CSAM evidence.
However, they might be required to comply the demands of NCMEC if they ask to stop redistribution of certain visual depictions by providing hashes. This is were scanning steps in.