I suspect it's because the usual threat model is "overseas attacker" rather than "attacker one state over." That said, if it's by IP, I don't see why they coul

I suspect it's because the usual threat model is "overseas attacker" rather than "attacker one state over." That said, if it's by IP, I don't see why they couldn't localize it closer, at least to an approximate state level.