I swear I saw an interview with marcus where it explained the permissioned nature whereby a transaction wpuld be rejected before it even sent if the kyc was flagged by the receiver.
It’s trivial for the service provider to deny service. I do not know what mechanisms they have in place for this at present but it is definitely technically possible.