[Buge]

> One would need to dig deeper to get a really informed opinion.

There are a ton of security experts who have indeed dug deeper, and came to the conclusion that it was Russia.

[Iv]

There just need to be one, with a good write up of the evidence and the evidence be better than "they used the same tools" or "their IP is in Russia". The linked article does not detail them.

I have seen US TLAs blame China on really laughable evidences (and fail to do it properly on the one undeniable attack they did on GitHub)