I thought this was always the case?

But what people do instead is to disable access for people from that specific state.