After looking at it some more 'first-class' is overselling it. I'm still working my way through the code but I believe pretty much all interaction with bluesky/atproto by a user would be via federated instances like mastodon that can moderate as they see fit. The instances have final say in what you are allowed to do. The difference being you have a public key identity that is decoupled from a single instance. @moojd.blsky.app and @moojd.example.com can both be aliases to the same pubkey identity and if blsky.app is down my content will still sync with example.com.

Now imagine if all the third-party aggregators block Nazis. They can post as much as they want but virtually no one will see it.