The IWF data is real, but it argues for the exemption, not against it. That material already lives on decentralized networks that ignore every law. Making open-source platforms legally liable won't remove the content; it'll just add a new crime for whoever happens to be findable. The architecture doesn't change the risk, but it does change who can reasonably act. A volunteer developer can't verify anyone's age without building a central identity system—which defeats the whole point of open source. The law should target the platforms that can comply, not the ones that can't. Otherwise, it's just symbolism.