This has nothing to do with security. If anything, maintaining data centers on a per-country basis would be harder to protect.

In-country data requirements add a level of bureaucracy to the web that is just bad for users, as well as companies trying to innovate. This is a combination of both censorship and protectionism.