They were going to implement “harsher” (read: more invasive) anti-cheat at some point, but it never happened as development stalled. Some say the devs are lazy, but I think it’s just the classic feature creep that cripples passion projects with zero oversight. Star Citizen is the highest profile example, although I think the feature creep is part of its appeal to a lot of people. So that might be an imperfect example.
In my experience with TF2, many popular community servers have common-sense rules like no slurs, cheats, etc. The great thing about a player-run server is that, if you want, it can be stricter than official guidelines, as Valve for example is pretty hands-off beyond the obvious in-game cheats. It allows pockets of the community to shape the experience they want to have more adeptly than official servers ever could.