1. You can build systems in a way that every access is strictly logged and audited.
2. Many companies like Facebook or Google employ engineers who could be possibly spying for Russia or China. But the systems and trust models are designed with this in mind.
Here we see unrestricted access to user data, not even sure there’s audit logging in place.
Correct, they do not have overseas data (at least in China).
However, GitLab's restriction also prevented them from employees moving to China as well. Many companies employ people in Asia/Europe timezones as a night-time on-call engineers and support.
Not to mention, the list (China, Russia) is a list of countries made up by GitLab, with no particular backing that's officially recognized by any particular government or organization, which makes the situation discriminatory.
1. You can build systems in a way that every access is strictly logged and audited.
2. Many companies like Facebook or Google employ engineers who could be possibly spying for Russia or China. But the systems and trust models are designed with this in mind.
Here we see unrestricted access to user data, not even sure there’s audit logging in place.