well, regions can also be detected from privileged device APIs but we can't guarantee the app making the purchase has access to those APIs or not.