Maybe it could be great but good devs have the privilege to avoid this risk and go work abroad. I live in thailand and I speak russian so I'm familiar with russian devs escaping russia and tbh it's very easy these days with how easy it is to open a company in Singapore or Delaware.
Worth noting that rolling your own country wide spying distro wouldn't be as easy as one might think given that Linux kernel dev must follow US sanctions and there is some serious work there when it comes to hiding spyware effectively for at least plausible deniability, russia is not quite North Korea just yet.