Can Cobalt data flag a mismatch between legal address and state of registration?

Yes. Comparing the submitted address to the SOS registration state is a common fraud-mitigation tactic and can trigger review.