> I don't think any tech company so far tracks licenses attached to citizenship.

Access to certain software being gated on one's citizenship is not at all new.

§ 734.13 Export.

(b) Any release in the United States of “technology” or source code to a foreign person is a deemed export to the foreign person's most recent country of citizenship or permanent residency.

https://www.ecfr.gov/current/title-15/subtitle-B/chapter-VII...

The rule in this form seems to go back to at least mid-1990s.

I held jobs at multiple U.S. companies, not personally working on anything remotely sensitive. My experience has been that it's completely standard practice to be asked to sign some U.S. export control papers.