Which could be a "change to the game" but that might be worse. Protections like Section 230 are absolutely abused by large companies. But protections like that are also what has made the internet even possible

Overly strict rules can also be weaponized. Imagine running a site that supports user content, but any appearance of CSAM on your site was jail-worthy, and you get an email demanding bitcoin or you're about to get hit with some posts that will shut you down. You have good moderation but you know you can't withstand a literal attack, someone who can automate that attack and has a financial motive to get illegal content onto your site. what do you do?