They can put countries on a blacklist or greylist and pressure them though. And they do push out 'standards' and things that involve moar KYC and screening etc.