I am wondering if a valid aspect of limiting this to people living in Germany could be to prevent Denial of Service attacks from abroad. Of course these could also be launched from Germans...

Under the current law you already have to pay up to 500€ for a request. That would be a very costly DoS attack.