Section 230 has shielded them from criminal liability for exactly that.

See Fields V Twitter