Websites like Kiwifarms play a cat and mouse game with hosting providers, who typically don't want to host them. Cloudflare's other services make it easier to conceal which hosting provider is involved, making it harder to (legally!) pressure them. DDoS isn't the only way to take a site down.
There's obvious motivations to take things "just one step further" with a community that eggs such behaviors on.
And that's true from a legal perspective as well. Tons of law deals with people who were not the individual to did the criminal deed, but instead offered the opportunity to do it or encouraged it.
We don't live in some libertarian fantasy where every individual operates wholly separate from one another. It's just not how we as a species are wired.
How "hosting" someone posted makes them responsible considering section 230 and the 1st A?