Speech Route taught me that Connect questions are review. Export compliance is one of them. I am not a trade lawyer. I am the person who has watched a version wait because a radio button was empty.
It sits on the version
You cannot skip it and be Ready to Submit. Same shape as social media in age rating.
HTTPS is still an answer
Most apps use encryption for HTTPS. Apple's form has a path for that. I fill it when I upload, not after the first confusion in email.
On the list
Pre-submit includes Connect completeness, not only the paywall. Empty Connect was the extreme version of the same lesson.