Perhaps it’s more nuanced than my understanding, but sites/companies are sheltered from liability for unprotected (illegal) speech posted by users — that is/was the whole point of the communications decency act section 230. Lawsuits may fly, but would be quickly dismissed.

Maybe if your business existed solely to host, or encouraged unprotected speech (threats, fraud, defamation) you’d find your company in trouble.