I've updated my post to address this. While some of that is in the user's control lots of this happens behind the scenes ie: AWS banning users of SES who send out spam emails, GMail banning the spam accounts, hosting providers removing domains or infra that host malware/C2 infra, etc. This is all happening constantly behind the scenes to stop what is very literally "speech", what might even be legally protected speech (certainly you can put the source code for malware online, you can even write and deploy malware - people do it all the time for pentesting).