TIL from this article: user blocking in Twitter is done on the client side, not the server side. Weird.