Yes you can send a token or NFT to anyone on the chain, yes as far as the data layer is concerned that is "immutable". That however does not prevent you as a user to forgo your access/freedom to an entity that knows best for you, just like we do everyday in traditional web services, social media, banking institutions etc.
What does that look like? The underlying data layer (the blockchain) is public and open source. A "moderation" company can build their own middleware that filters data, throws out spam/harassment etc. Then, your node or wallet consumes and interacts with this middleware instead of the base layer. Now you have successfully incorporated abuse/harassment moderation without having to worry about the blockchain at all. If someone sends you something undesirable, you never see or interact with it.
At the end of the day, blockchains give you *the option* to have your freedom, they do not force it upon you. The same can't be said about the traditional tech.