Nation state is not a fancy infosec way of saying country
(Can it really be because "nation state" is more fancy?)
I can understand, though, why they don't say "state" -- maybe that'd sound as if a single state in the US had attacked
I think your point about confusion with constituent states is spot on though