The issue is that NSO makes spyware available to far more countries by lowering the barrier to entry. Looking at their sales history, they have little criteria for sales besides following the preferences of the Israeli government. They sometimes sell to nations that generally promote human rights, and other times sell to nations that are very repressive yet important allies to Israel.
Yes. There's at least a principled discussion to be had about the pros and cons of something like "full disclosure" vs. "responsible disclosure", but based on everything that's come out about the company I'm pretty comfortable at least provisionally tossing NSO Group in the same bucket as the ghouls who charge prisoners a per-minute fee for phone calls to their families.
yes I can totally blame the bully for using the stick he just found, and selling their services of "beating up blameless victims" to the next-biggest bullies. that's what responsibility looks like. NSO group are 100% responsible for what happens here. (which doesn't pe-empt someone else also being 100% responsible, for the record. I know, sounds unintuitive :D )
