It's sovereign immunity. Any state agency can do whatever it wants and claim immunity unless the Feds get involved. The Feds can do whatever they want full stop.
The only constraint is that the state can allow itself to be sued, and therefore you have some recourse that way.
The only constraint is that the state can allow itself to be sued, and therefore you have some recourse that way.