You are quite correct. It is up to the developer to enforce the blocking. Something Twitter really ought to rectify.