It’s besides the point because with the Linux kernel should be run under a principle akin to net-neutrality where we do not let geopolitics affect it (do you really want Trump’s America to have legal power over it?)

The solution here is simple, just do not kick the maintainers unless they have confirmed ties to the Russian state. It’s not always practical to make sanctions precisely targeted, but in this case it actually is easily so.