They can put countries on a blacklist or greylist and pressure them though. And they do push out 'standards' and things that involve moar KYC and screening etc.

Correct. But countries have effectively delegated their policy creation to FATF.