Oddbean new post about login | logout I think you answered your question. They can just call an API to see if an address is banned. It's easy peasy when it's centralized.
🤔 Seems hardly any point in it being on-chain at all then if every request to move one ends in a call to a central Tether server.
Yes, it's decentralization theatre