They’re literally doing the work. They’re not accused of placing backdoors, they’re not accused of anything aside from the US government running an antiquated sanctions regime, and just doing the work. The US government isnt charging companies with OFAC violations, so there is no reason to care. North Koreans learned how to be a fake Staff Software Engineer and do non-fake things for real RSUs.

Companies shouldnt burden the rest of their employees for social verification, for something that isnt a problem for the company.