Do tiny SAFE rounds really require state-by-state securities compliance? I will not promote

I’m raising roughly $30k–$50k from a few friends, with potential investors in California, New York, and Arizona. Some may be "non-accredited" I understand SAFEs are securities, but do small startups really have lawyers analyze each investor’s state exemption individually? Or is the normal route basically: Delaware C-Corp → SAFE → Rule 506(b) → Form D + routine state notices? Curious what founders/lawyers actually do in practice for small friends & family rounds. Sorry, this is based off some AI research. Am just trying to learn about compliance before I actually start the process.