I block most of the world from incoming connections.

Outbound is less restrictive.. But I still block a bunch of countries that are deemed high-risk.

China is def on both lists..