If there's any legal entity that could be liable or is regulated by California law, just block California IPs and be done with it

Pull out of California and let's see how the IT state handles it