Did they just throw this randomly in the mix

Binance doesn't accept anyone from Iran and also considering that it has a strict KYC policy there is no way to circumvent that either.
They just did not mention when the violation happened. If they counted it since Binance birthday in 2017 and a few years later before the exchange required KYC on their users, it is very possible that there are users from Iran or other sanctioned countries, locations used Binance and laundered their criminal money through cryptocurrencies and Binance.
They only started to do KYC since 2021
How KYC Helps Keep Users Safe in the EEA & UK