Hate speech (both punching up and punching down) is protected speech in the USA. So is "injurious" speech that is not defamation or fraud. It's a common mistake.

True threats and a specific form of incitement are NOT protected. Section 230 offers a site protection from some of the liability (otherwise Twitter would have been shut down years ago). But a person posting unprotected speech is fully liable.