Well, it has potential for a singularly unpleasant watering hole attack, few states have a blindingly obvious track record of it, and exactly one of those is in the acute phase of open acts of aggression warfare...
Seems pretty clear what's the highest priority working hypothesis until the evidence is in.
Number two could well be entertaining ideas about shaving a couple of items off their conquest list while the action is keeping the World busy though, and if so both trojanizing a particularly poorly defended part of billions of computing devices worldwide and securing fuller access to software and plans for "AI accelerators" would seem desirable.
Or all their talent made itself scarce when they saw the writing on the wall and what they have left is scriptkiddies who are capable of defacing a website when given a target to take down.
It's bad to underestimate the enemy, but also bad to overestimate them.
Number two could well be entertaining ideas about shaving a couple of items off their conquest list while the action is keeping the World busy though, and if so both trojanizing a particularly poorly defended part of billions of computing devices worldwide and securing fuller access to software and plans for "AI accelerators" would seem desirable.