"Online safety" is a concept. It doesn't exist because it doesn't fit into reality yet. There is no way to achieve it unless clear incentives rule. It can not be achieved through policy, only through protocol. Because policy isn't the driver of motivation, protocol is.