Blocked users should be treated as guests for access checks
When an access check is made it simply checks that they have a user id. It should also ensure they're not blocked, not banned, are accepted, and are confirmed; otherwise treat them as a Guest so they have no permission for anything. This will also help stop notifications and other actions from performing for the user.
Quickfix in the following topic.