>A lot of companies already block traffic by country of origin and have since they existed on the internet.

Is this an American thing? For example the home Depot and velera do it.

I've seen network operators talk about it from all over the world.

If Sarah owns a gardening center and sells stuff locally, why does her business need to accept connections to her website or network from a foreign country? For her given the attack risk, it makes much more sense to block non-local traffic.