When it comes to export controls and sanctioned entities it doesn't really matter what Red Hat would like to do - they have to comply with the law in the jurisdictions they work in. Even if it was purely a community project individual contributors face a similar liability if based in those jurisdictions.

When it comes to sanction lists there is a fair amount of commonalty between the US and Europe. This is really something to complain to government about.