Second guessing the bosses is the job of the courts. It's what they do when they apply the law as it stands. Iran has a central government, is not a war zone, and is not a source of terrorist attacks on the US; Yemen and Libya and regions of a couple of others can provide records as good as those from most countries. And Saudi Arabia is still missing - along with Pakistan, Afghanistan, Palestine, Israel, Turkey, Kuwait, and Egypt (speaking of countries that have actually provided terrorists who attacked the US, and whose records are suspect). And of course there are places like Germany, Canada, and Sweden, who have already taken in refugees - refugees have no proof of their status more or less by definition - and so people from those countries would be pretty high risk if anyone is.