Encumberance happens on the receiving software.

This is effectively the same attack as requiring KYC for all transactions, no covenants needed.