This is one of those things that sounds really good on the surface, and hopefully it is so, but I'm always wary of unintended consequences when it comes to legislation. Are there any loopholes or bad behavior this might enable? Just something to keep in mind and consider, but on the surface I'd have to say that this does sound pretty good.
Yes; if you're a company that doesn't like Click to Cancel, and your company's Pennsylvania business is small relative to your total business, the logical choice is simply to stop serving Pennsylvania citizens.