There are laws, but as a practical matter they aren't enforced.
Individuals are not held responsible for the threats and illegal speech they make. Look at all the threats made against people on social media. The fact that there is almost no accountability means it keeps happening.
The only repercussions most of the time is that the platform kicks you off. Part of it is, its their platform and from a business perspective having you around if you are too toxic isn't wise.
It seems like a society problem. Non enforcement and a lot of people with nothing to loose.
Whether it will be applied even-handedly remains to be seen, but there is a law to deal with this, and I suspect it's a factor in why businesses of all kinds are running screaming from anything connected to the attacks (including other businesses that fail to themselves cut off any activity with a nexus to the attack, the attackers, and the apparent planning for future attacks): 18 USC Sec 2339A, which makes it a federal crime to knowingly provide any goods or services except medicine and religious materials connected to any of an enumerated list of federal criminal offenses collectively designated “terrorism”, punishable by fines and imprisonment for up to 15 years unless death occurs as a result of the crime, in which case the imprisonment becomes for any term of years or life.