I don't really see the issue.

The web admin should be able to block usages 1, 2 or 3 at their discretion. It's their website.

Similarly the user is free to try to engage via 1, 2, 3, or refuse to interact with the website entirely.