I only recently learned that this was a myth. The core of S230 is:
No provider or user of an interactive computer service shall be treated as the publisher or speaker of any information provided by another information content provider.
As long as YouTube isn't creating the content they are protected.