From the docs it seems like that would just silently not install the blocked package, so while it would protect my dev environments regular pip installs would still pick up the transitive dependency.