Indeed, one of my favorite inconvenient truths is that geo-blocking remains one of the most effective, and essentially free attack surface reductions you can make.

If all your staff are in a country, there's no reason for your internal tools to be accessible from any other country. If all of your customers are in a country, there's no reason for any of your web presence to be accessible from any other country.