>> I wonder whether they really need to have the data protected in all jurisdictions?
> Yes, you need that. Otherwise, evilcorp downloads a dump of the OSM data from LaxCountry where the data is in the public domain. Then evilcorp can claim full copyright over the data and make it proprietary.
But in places where it is protected, surely you would be able to say "you downloaded that data from us in a place where that was allowed, but you can't offer anyone in this place, where it isn't allowed, access to the proprietary database you included it in." Given my limited knowledge of the subject that is no more than a hypothesis of course.