Slightly OT - Isn't it obvious that NSO must be able to control every "copy" of Pegasus it sells? They wouldn't sell it unless they were absolutely sure it wouldn't be used against its own people and they have no problem selling to their arch enemies. NSO's defense has always been "we just sell the tech and can't be held responsible for what our clients do with it" (this was clear from the Darknet Diaries episode). I…
"They wouldn't sell it unless they were absolutely sure it wouldn't be used against its own people and they have no problem selling to their arch enemies." I do not follow that logic. They do not have to control every instance of their software, to defend against it. I certainly would not try to hack someone with their own tools. I would just assume they spot it easily and exchange the favour.
I think it's a sound argument, even if speculative.