I imagine sensible website operators would limit signups to below the threshold, so they don't run the risk of legislation unexpectedly applying. Otherwise it also becomes an avenue for malicious actors.