It is not settled law.
"This “anti-commandeering” doctrine, however, doesn’t protect sanctuary cities or public universities — because it doesn’t apply when Congress merely requests information. For example, in Reno v. Condon (2000), the Court unanimously rejected an anti-commandeering challenge to the Driver’s Privacy Protection Act, which required states under certain circumstances to disclose some personal details about license holders. The court concluded that, because the DPPA requested information and “did not require state officials to assist in the enforcement of federal statutes,” it was consistent with the New York and Printz cases."
Congress isn't requesting info but thanks for playing.
In case you didn't notice the Dept. of Justice is threatening to withhold funds

