Immutability on ipfs just means a given address will always point to the same content. It doesn't mean that content is or will always be available. Nodes who host harmful content are responsible for hosting it whether it's on a peer-to-peer network or a server/client network.