Since MS owns github does the same rule ban happen if a company uses office365-onöline/azure - and one employee opens email from Iran?
Maybe Cuba has a very well known set of IP addresses and it's easy to block?
We were required to block traffic from sanctioned countries, and were allowed to use a Geolocation IP Database to do so. Lots of lawyers reviewed it, as well as external consultants.