The leak of private information part comes from a text message case, where a private but forwarded defamatory text triggered liability. I could look for the particular case, but here's the gist from a lawyer: "If someone sends a false statement of fact to a) a text message group or b) an individual, who then tells others about the text, the message could be defamatory." 1/

The Section-230-protects-you-as-forwarder from EFF. It's in the plain language of the statute, by virtue of the word "user": "No provider or user of an interactive computer service shall be treated as the publisher or speaker of any information provided by another information content provider." Here's EFF https://www.eff.org/issues/cda230 They play up the "you can safely forward e-mail" stuff, because they are pro-230 and want to make the case it doesn't just shield big tech platforms. /fin