I think it’s safe to say that GitHub went above and beyond what is required. They prevented people from getting their own data before blocking them permanently from the site, which they did without warning, and apparently even targeted people who weren’t in those countries at all but merely had connected from one in the past. They could definitely do better.