You are right, they probably don't have to, or that would be basis for legal action.
Customers should also be allowed to expose shady stuff done by such private services, warning other people.
Right, just that from the article I get the vibe that the author makes the case Ukraine got blocked while it's the result of dropping a payment provider, not policy that singles out Ukraine