I don't exactly think compliant businesses would bother to cross-check your payment against a list of "dirty" coins/origins. instead I would guess that they would take lightning payments through a compliant LSP who is extremely picky about their channel partners. you wouldn't be able to pay for the merchandise in the first place, unless you sent it directly from another compliant LSP. it would operate like a whitelist.