Routing traffic for specific domains with known legal content is questionable practice, but at least it’s safe from the specific concern here (until someone finds an exploit, maybe a bad domain parser or something).

Routing arbitrary traffic is plain risky, it is entirely conceivable to be arrested for it, or at least be searched, whether you can explain it away later or not. “Other providers are doing it too” hardly makes it any less risky.