I don’t know what’s the toss-up. Those hackers have an operations base in some country. Once that country has been identified, the target government designs a one-off tariff that shall cover the damages arising from this bug until its fully covered. If the target government wants to avoid the tariff, it simply extradites the hackers to the authorities of the target country. repeat every time it happens. How long will those hackers still find safe heavens. That should be true for internet scammers as well.
The US has relaxed rules on fuel transport after a ransomware cyber-attack took the pipeline offline.