In my mind, region-blocking is actually probably the best solution for this in every case.
Cut off every legitimate operation in these regions (including my own) from using your genuinely useful software. Software isn't compromised, saves on unnecessary work and law compliance. Then everyone with a VPN flourishes anyway. And then maybe it hurts profits so much that lawmakers actually decide to reverse course. Wins all around.