No, it's more like NSO running a murder for hire scheme. The actual deeds are done by NSO employees using NSO's infrastructure. These "cyberweapons" aren't like guns, they don't hand this stuff over to the custody of anybody who buys their services. The buyer points their finger and NSO does the shooting. All targets are known and therefore approved by the Israeli government.