Even worse, that would not necessarily help. If someone's accessing your website through a VPN that's not located in that state, you would not block it… then become liable.

Better block everything at this point -_-