Codeberg is a service, not software. If we applied this standard then Codeberg would already have been in violation of the 4 Freedoms because they forbid distribution of CSAM (I would hope).

Forgejo is unaffected by this because it's the software not the service and is not subject to the service's terms of service. You're misunderstanding the scope of this policy change.