They probably don't but what better way to absolve themselves of any fault? If it's a nation state, then the attack is so sophisticated, that surely they can'

They probably don't but what better way to absolve themselves of any fault? If it's a nation state, then the attack is so sophisticated, that surely they can't be blamed for not having prevented it and following best practices would certainly not have been enough.