

Every country is sovereign in its territorial. This means that they can:
- confiscate actives in japan
- to pass fines
- to ban the access to the servers
- to ban the operations on its territory
- to jail the company’s representative of the country
- etc etc
As an example the EU did exactly this when the gdpr came into play
Setup a dns guardian system to make sure that they are not accessing some forbidden web pages (like only fans or Instagram). This extra layer of annoyance is pretty useful because there a lot of apps for kids with obvious holes to side load web pages that always keep me wondering if they were there by intention.
Apart of that I would setup a restricted shell to execute only the approved apps.