I'm also concerned about the possibility of extradition. Say the Australian government decides to ask someone like Werner (Github/dd9jn) to backdoor GnuPG over the internet, and he doesn't comply. Disregarding five eyes, could he now be extradited from the US because he broke an Australian law?

This question is in light of Huwaei's CFO being extradited from Canada. I know this law isn't something like the Iran sanctions, but I imagine extradition would still be a possibility.