Here's the thing... Nowadays "Hacking" has two distinct levels: script kiddies, and " they're digging where?!! "
Now I'm a 100% believer in the levels of autism and OCD ( besides , y'know, actual aptitude and knowledge) you need to actually find deeply buried flaws. But you're not going to tell me that people that can and find and utilise these holes and work for a "state actor" leave enough footprint to identify someone easily.
Easy to point at NORK or Russia. Any of the 5 Eyes is, of course, completely innocent, would not dare, the sheer thought, etc..