Ransomware is an actual threat. The fact that it can originate in Iran doesn't necessarily mean that it is more dangerous than ransomware from anywhere else.
Individual hackers of minimal skill are a threat to the IT infrastructure used by every organization in the US, so yes. If you mean is there a differential danger relative to other potential threats, then no.
My interpretation of your statement is that organizations in the US don't care about security and do the bare minimum to secure their systems, if anything at all
My mother runs a healthcare center that had a ransomware attack from Iranian hackers during the pandemic. For a few days during the peak of the pandemic their IT systems stopped working and it impacted operations. I think it was a common practice to wait for an opportune crisis to strike. That probably resulted in more people dying from the pandemic.