There is still no legal precedent around a case like this as it relates to DAOs and autonomous smart contracts, so a law firm could not have told you anything except "we can neither confirm nor deny." If there is another US sanction that targets a non-custodial smart contract and open source project, please do share.
Devastating that it has come to "do not code an E2EE privacy tool because you might find yourself in jail one day."