I’d argue it’s on the state to figure that out (for better or worse). My site is on a globally connected network, if you don’t want your citizens doing something, you figure it out. It’s not my job.