[Cthulhu_]

And they have for years now. Invaded / occupied Crimea with a slap on the wrist at best. International cybercrime for at least 15 years now, probably longer, but they get plausible deniability because it's not officially state doing it (even though we know they are).

But outside of Ukraine, none of it crosses physical borders; the sabotage of undersea cabling is all done in international waters, the internet is some kind of free for all as well, etc.

What should have happened is that the international community stepped up and sent a clear message, like "Russia will be cut off from the internet if they do not stop their digital attacks". Boundaries mean nothing if there are no consequences to violating them.