> That’s all how it’s supposed to work. In practice companies probably circumvent the restrictions.

Ex-colleague of mine told me he used to work for this company in UAE (he told me this story 15+ years ago, so he worked there even before that). He said it took him months of working there before he discovered that their entire business was evading US sanctions against Iran-they’d order servers/etc from the US, tell the US vendor they were for use locally in UAE, then ship them straight across the Gulf. The UAE government presumably knew this was happening but chose to turn a blind eye; the US government likely did too, but struggled to tell which orders/purchasers were legitimate and which were sanctions-evaders, plus likely was worried about enforcement action causing issues in the US-UAE diplomatic relationship.

I’m sure there are similar businesses out there who specialise in evading US sanctions on China.