> what about dishes that get captured by Russia?

If Ukraine is whitelisting this doesn't seem to be a problem

  - Ukraine can set validation rules, such as needing to be verified every 24 hrs. Make this possible to do on a per-key basis since some will be more at risk than others.
    - Give an API to set certain rules to keys too. Like how fast it is able to move or based on any metadata. 
  - Only allow dishes that have been white listed via an official Ukrainian signing key access to working in that region of the world.
  - Allow Ukraine to choose which licenses to approve and revoke because yeah, Russia, please take the dish so that Ukraine can get more information on Russian targets. If Russians steal a dish, the dish is known to be stolen, and the Ukrainians still have access to the dish's metadata, well you may not be able to see the drones but they are broadcasting their GPS coordinates to you...

  > As noted, what about all the privately paid-for dishes?

There's usually certain concessions in war. I don't know the dynamics to have an opinion here. But possible solutions are let Ukraine deal with that or provide different capabilities to private dishes such as rate limiting or feature limiting. You could even just provide all data to Ukraine for dishes in their territory.

I'm spitballing here, but my point is that these don't seem insurmountable problems. Like you say, there are costs and benefits, but a few of these suggestions would reduce costs while allowing Ukraine to keep benefits.