Please read the actual regulations and laws. They do not work the way you are assuming. Companies with obligations under these regulations are required to actively prevent constructive export via domestic distribution. If you let a foreign country launder access to the tech through domestic channels, that is on you. It is why KYC laws exist.

You don’t want to fuck around with export control laws.