Allowing states to force ISPs to block websites might be an even bigger can of worms.