Violating sanctions is definitely a concern as your company gets bigger. See: https://news.crunchbase.com/news/startups-have-to-care-about..., and github restricting access for people from iran, syria, and crimea.