They’ll just slap a “Not for use in California” label over the download page then move on with their lives
Yup, see how long it lasts when companies in California can't install anything on their servers because they get Rejected for Legal Reasons responses to their package requests.
Because the "store" never confirmed that Cloudflare is 18.
And "not for use in Texas": https://legiscan.com/TX/text/SB2420/id/3237346
And "not for use in Louisiana": https://legis.la.gov/legis/Law.aspx?d=1428944
And maybe Brazil, Australia, Singapore and Utah as well (not checked): https://developer.apple.com/news/?id=f5zj08ey