For my own understanding, what potential dangers are there using a Yubikey as opposed to an open source key?

I always wonder what legal risks hosting something like this comes with. If you host a public server and uploads are client side encrypted, seems like it would be a magnet for illegal file transfer and CSAM, no?