Ultimately the problem is that extradition treaties are a thing. While it’s one thing for a company to ignore a law in a country they don’t “operate” in, if you provide services in that country, you are technically subject to its laws, and if they decide to force the situation you could find yourself arrested in your home country and sent to face trial or even serve a prison sentence in another country. Technically your home country could refuse to extradite you, but that has all kinds of political ramifications and so unless you’re someone very powerful in your home country it’s unlikely the state will step in in your favor. The safest bet is simply to block all access from a specific country, and then if pressed you can simply say “we did our best to prevent access from your country and do not provide service there, anyone accessing our service from that country is circumventing our restrictions and there’s nothing we can do about that”, which is probably good enough to torpedo any case against you.