Or alternatively, there isn't really any evidence that the Israeli government was involved in this, which is probably why its not getting very much flak for this.
Maybe you could make the argument there should be better export restrictions on private companies to treat so called "cyber-weapons" like real weapons. There are a bunch of efforts on this front. You kind of have to have the treaties in place before you can start exerting diplomatic pressure in regards to them. There are plenty of people working on that, but the wheels of the UN move slowly. Anyways, this particular incident doesn't change much in that regard.
For 3, i dont really think this incident (a failed hacking attempt of a type that is pretty typical) really changes or says anything about constant surveilence. We are already way into the era of constant surveilence.