Blaming GRU for hacking SolarWinds is like blaming rain for being wet. The actual target of "vigorous response" should be arrogant and incompetent software vendors who win gov tenders by declaring all kinds of security compliance yet cannot deliver on the very basics.
You can be morally right but still get breached if screw up your infrastructure, that's the key take away here.
@kravietz
If somebody talks about a democracy hacking a dictatorship's nuclear program in the same article as a dictatorship hacking a democracy's elections, that's too far into the propaganda zone for me to take seriously.