I think the same applies to Tornado? I am not sure and would be happy to be corrected. As far as I can tell, being sanctioned like this makes it illegal for US

I think the same applies to Tornado? I am not sure and would be happy to be corrected. As far as I can tell, being sanctioned like this makes it illegal for US companies and people to do business with you. So I think in either case it would be users who were prosecuted? Enforcement is always the even messier bit of these broad and badly defined laws...