Is it really "ridiculous" to hit a crucial service provider in an enemy state, which local law enforcement is guaranteed to not punish them for, if they aren't

Is it really "ridiculous" to hit a crucial service provider in an enemy state, which local law enforcement is guaranteed to not punish them for, if they aren't outright funding the hackers. These attacks happen all over the West, you only know about this one because the negotiation was leaked. Lots of public service providers are targeted, such as universities for example. The actual scandal is that this gets hushed up, if the people knew the scale of these attacks they might think we're in a sort of digital war.