Principles are easy as long as someone else is paying the bills
AFAIK GitLab is still being bankrolled by the VCs so having a warm and cuddly policy is just good PR that costs next to nothing. Expect it to have shelf-life of the time it takes to IPO or be bought.
Companies do, in general*, have the right to choose their customers with boycotts on Apartheid South Africa particularly well-documented, including the fact that the boycotts had negligible affect on the politics. But, if you do get into bed with the devil, make sure you don't get caught or fall foul of one of the arbitrary US sanctions: bombs to Saudia Arabia for dropping on Yemen are good; bombs to Iran for dropping on Yemen are, of course, bad. Greasing palms in Africa for mineral rights is always good.
* There are some exceptions when it comes to dealing with the general public.
Biting the hand that feeds IT
