That's not what I'm asking. I'm asking how above and beyond are they required to go with ensuring this. Technically they could require a Netflix employee to be present to verify identity whenever you stream to ensure you are in the correct country, but obviously they aren't going to that extreme of lengths. But if they're actively using heuristics to target blocks of legitimate residential IPs that might be secretly using VPNs, well that sounds like above and beyond what they may be obligated to do.