Debian or Arch or Ubuntu never ask for my confirmation ?
Example :
You acknowledge that openSUSE Leap 15.3 is subject to the U.S. Export Administration Regulations (the “EAR”) and you agree to comply with the EAR. You will not export or re-export openSUSE Leap 15.3 directly or indirectly, to: (1) any countries that are subject to US export restrictions; (2) any end user who you know or have reason to know will utilize openSUSE Leap 15.3 in the design, development or production of nuclear, chemical or biological weapons, or rocket systems, space launch vehicles, and sounding rockets, or unmanned air vehicle systems, except as authorized by the relevant government agency by regulation or specific license; or (3) any end user who has been prohibited from participating in the US export transactions by any federal agency of the US government. By downloading or using openSUSE Leap 15.3, you are agreeing to the foregoing and you are representing and warranting that You are not located in,under the control of, or a national or resident of any such country or on any such list. In addition, you are responsible for complying with any local laws in Your jurisdiction which may impact Your right to import, export or use openSUSE Leap 15.3. Please consult the Bureau of Industry and Security web page www.bis.doc.gov before exporting items subject to the EAR. It is your responsibility to obtain any necessary export approvals.
Debian doesn’t have a legal entity, it’s based out of nowhere. Always has been.
Debian is legally part of Software in the Public Interest, Inc., which it also founded.
No it isn’t. The foundation only holds on to the trademarks and logos. It also allows the group to hold funds.
The project itself isn’t held, led, or otherwise directed by the foundation.
Eh, you’re right.
Not at all hard to do. The foundation receives funds and gives them out to whomever. That’s it.