I got down the rabbit hole (20 open tabs at 1AM local time, you know) and it seems most of the 'normal' software like Operating Systems & Devtools are classifie

I got down the rabbit hole (20 open tabs at 1AM local time, you know) and it seems most of the 'normal' software like Operating Systems & Devtools are classified as 'mass market' and are subject only to 'Anti-Terrorism enforcement', meaning you cannot sell them only to Iran and couple other countries. Meaning NSO Group could not buy tech to build nuclear warheads in their backyard, but otherwise they are good to use any 'usual' US-made software. Other commenters say it is significantly harder for companies in that list to banks because of that list. Is that true?