This is one of these systems where you need somebody at the location you want to hack, and that makes things a lot harder from an opsec / legal perspective. It

This is one of these systems where you need somebody at the location you want to hack, and that makes things a lot harder from an opsec / legal perspective. It is pretty trivial to detect where a malicious radio signal is coming from. Combine that with the requirement that it must come from the country being hacked, where police is presumably easy to deploy, and you get an almost-unhackable system in practice, despite many theoretical security flaws. Compare that to the internet, where detecting the true origin of traffic (assuming the attackers are using VPNs and/or TOR) is very difficult, and even if you do so, you still have to convince some foreign law enforcement agency to prosecute. This is non-trivial with unfriendly countries like Russia, and actually impossible if the attacker is the nation-state itself.