[walrus01]

see here: https://news.ycombinator.com/item?id=16712540

Unless the rooftop CPE can be significantly disguised, it'll be difficult for places like Iran. The Iranian government periodically goes on (not very successful) campaigns to get people to remove rooftop Ku-band TVRO, Rx only satellite dishes. Those don't transmit. With a portable spectrum analyzer it will not be difficult to identify starlink rooftop CPE radios.

This is ultimately the same problem that applies to rubber hose cryptanalysis. From a network engineering perspective, if an authoritarian state can use sufficient local resources to control the OSI layer 1, it doesn't matter how good your L2 to L7 are.