I am wondering if a valid aspect of limiting this to people living in Germany could be to prevent Denial of Service attacks from abroad. Of course these could also be launched from Germans...