Sure, there are ways. There are ways to watch every single American all the time; China is trying that with their citizens already. Doesn't mean we should, or will, or that it will ever make sense.

PH is a business, and the overhead of adding this system, on top of the PII, compliance, and access risks that come with it, doesn't make business-sense.

What costs more? implementing a sweeping system with tons of risk, or blacklisting one state?