Perhaps it could be added as a security option, allowed based on the trust level of the world creator. That way skilled developers could make use of post processing creatively, but users could disable it.

If you made a global non synced override on the post processing volume (isActive) it could be on a per player basis.