Magnitude isn't really what's important for state-sponsored hacking, at least not of the kind that China (and the US) engage in. Covertness and deniability are

Magnitude isn't really what's important for state-sponsored hacking, at least not of the kind that China (and the US) engage in. Covertness and deniability are more important, as is being able to target an attack to a particular victim. Log4shell doesn't satisfy any of these constraints. The Tianfu Cup, on the other hand, exists primarily because Chinese researchers kept disclosing valuable bugs at Pwn2Own[1]. [1]: https://en.wikipedia.org/wiki/Pwn2Own#2018 https://en.wikipedia.org/wiki/Pwn2Own#2018