> While proving that the attackers originate in China might be easy, clearly connecting this to a government-supported operation seems quite a challenge involving long chains of reasoning.

Connecting to a government-supported operation has already be done before [0]. There probably isn’t that much difficulty to do it again.

[0] https://en.wikipedia.org/wiki/PLA_Unit_61398