And funny enough, USA still considers encryption technology a controlled technology, and funny enough fact that R&S FW image is encrypted (to prevent decompiling) is enough to trigger export control from these dimwitted bureaucrats.
And since keeping track of what is and what is not OK to distribute is never ending and ever changing maze of rules worth of Kafka making a new book, they simplify.
Long ago we had a new over zealous ITAR Security person that got on my case about talking with our Canadian design team about the required Supply Voltages and rise/fall times for the chip interface they were designing, they were doing some of the digital stuff for our new SoC. She said these are forgiven nationals and that information is restricted under ITAR, and we must get prior authorization from Security on what we can say and discuss with them

Later we had a major technical meeting with customer is a secure area (SCIF) where no phones, laptops or any electronics are allowed, and she attended to make sure we were in compliance. During the meeting I got up and stopped the meeting and asked everyone to turn in their pencils, pens and paper notebooks to Security. When asked why, I said look at your pencils and pens, some of these were made in China, and some paper notebooks were from China and India, I grabbed our Security persons pen and sure enough it was from China!! This is clearly a Security Violation and our on site Security Personnell will collect all these items and file a formal Security Violation report and many of you may be asked to return later (many flew in for these meetings) and for a personal Security Interview as required for a Violation!! Needless to say our over zealous Security person didn't attend any more technical meetings and soon left our group

As ridiculous as this sounds, this is how things can get twisted where someone with no common sense is empowered

Best