@pixelfed db queries aside, I changed my mind: as much as the user should be able to choose, at the same time the admin should be able to allow NSFW or not.

Same thing happens on Mastodon.

As long as users can follow another user on a federated instance which allows NSFW, then it's all good.