Eh, but then they'd likely enforce a GeoIP block.

And even then, they could be targeted because a GeoIP block can be bypassed.

Binance & BitMEX tried it and both got burnt.