A cycling site with 275k MAU would be in the very lowest category where compliance is things like 'having a content moderation function to review and assess suspected illegal content'. So having a report button.
I would never except personal liability for my correct interpretation of the GDPR. I would be extremely dumb if I did.