State-Based Contact-Tracing Apps Could Be a Mess