Toronto cash seems to avoid the “not incentivice illegal usage”, and after a quick check it seems to be almost it’s sole reason to be, please correct me if I’m mistaken here.

I'm not familiar with the details. The point is simply, don't expect to get away with playing games.

Seems like the EU Safe Harbor Provisions, you basically must not incentivice illegal hosting, accept takedown requests, but also have some sort of procedure for the takedown requests. Which all seem quite easy to follow and adhere to and would function perfectly for Tenfingers IMO.

Yes, but there is more. The DSA is written in a very convoluted way, with the exceptions for smaller platforms scattered here and there. I don't remember what exactly applies here. You may also have obligations under the DMA, CRA, and quite probably the GDPR.