"Courts are increasingly willing to conclude that Section 230 is not a defense in lawsuits arising from claims about product design, though the line is not always clear."

—Jeff Kosseff, cybersecurity law professor