The state has targeted lots of private conpanies for decades, offering the advice to American companies as a competitive advantage.

This is different from states trying to explicitly destroy another company, but the bottom line is the same: you need to include state actors in your list of potentially hostile attackers, same as any black hat.