Blocking all traffic from regions of the world that you have no intention of servicing is a very valid cybersecurity layer.
I pretty regularly run into things that block access or make me complete captchas while I'm traveling. I may not be in a region you intend to service, but I'm (possibly) from a region you intend to service. Airplanes are a thing.
Buying access to a residential proxy to deal with that situation would be an extreme step for most people, but as a cybersecurity practice, it's problematic.