Right, and the limits of that liability shield are not well enough defined in the law so the policy must define the limits until Congress acts to clarify the law. Hence the rulemaking.
Facebook and Twitter's actions yesterday and the controversy over the role of 230 make the lack of clarity apparent.
If Congress doesn't like the new administrative policy, allow them to clarify.