I would imagine the intelligence services aren't happy he's providing them free pen-test services. He's taking potential tools out of their toolbox when they may need/want them in a future time of conflict.
So if the reds start parachuting down over your community you should just sit pretty lest you interfere with your military’s operations? The equivalence is not a false one in my eyes because a cyberattack against a US national’s systems should be seen as an attack on a US national’s property.
I imagine you would be told to evacuate if possible but I'm sure the military would prefer you just don't get involved. Civilians should stay out of warfare.