(1) is tricky. Laws like this do not apply to IP addresses AFAICT, they apply to people. Someone CA law applies to can access your server using a non-CA IP add

(1) is tricky. Laws like this do not apply to IP addresses AFAICT, they apply to people. Someone CA law applies to can access your server using a non-CA IP address and someone not restricted by this law can access your server using a CA address. I'd be surprised if you'd be "off the hook" for a child covered under this law accessing your service via a VPN. And, as a user, I'd be upset if I couldn't access your site using mullvad. I wonder if banning CA users in your ToS is sufficient for passing the burden of this law down to CA residents?