but at present they don’t have automated systems that quickly identify and find every instance of something like this.

My point is mostly they don’t have to do the impossible and single out one guy who routes his laptop via third country to the DRPK, my point is that you either find the guy going on cannonball runs all his life or alternatively the aforementioned sheboygan hotspot of remote worker connections to tech companies all coming from hostile countries