There's also a duty of care by clients. If your client connects out-of-the-box to relays without any moderation you are responsible to what users are exposed to, ethically and legally. Clients that expose users to gross content out-of-the-box should be rare.