gTLDs at least have some minimal level of accountability and security standards.

ccTLDs are at the whim of the country. If you went with the '.su' ccTLD from the soviet union some years back, well, that would have been quite unfortunate.

Legally I feel like they're also worse. Like, say you're an abortion clinic operating in the regressive country of the US, and you get a '.us' ccTLD, surely it's more likely the government outlaws abortions and censors your domain via the registrar than if you used a '.com'?

ccTLDs have their own problems, many of them have been effectively privatized and are operated just like gTLDs.

One particular weird example would be the Bulgarian .bg TLD: https://eualternative.eu/guides/bulgaria-bg-private-registry...