It's all just a crock of you know what.  Ironically, Drake has different things that they claim are "required" by the security summit/states.  Drake uses the "lowest common denominator" state.  So if I open a new 2020 return for a client who filed a 2019 return in MD then the software forces me to verify the SSN on the federal return.  But not if I open a 2020 return for someone in VA.  For VA, however, I'm not required to verify the locality code in Drake, Drake pulls this from a database based on the address on the federal return.  But ProSeries requires me to enter the VA locality code from scratch every year because "VA makes them do that."