That's the whole point of Section 230. Service providers generally have immunity with respect to third-party content posted by their users. If a user posts something, it's their speech, and the user is therefore held responsible for it, not the website. Section 230 is what makes an internet of user-generated content possible.

https://www.eff.org/issues/cda230