I thought section 230 only protected against civil liability, not criminal.