Small correction: the credit card is not needed if you go through specific steps like a free app. Then you can select “none” as the payment method in every country I’ve tested so far.
Okay, this makes me a little more comfortable - does Apple state this as being how they determine data residency?