The funny thing is a state level actor can spend <0.01% of their defense budget to take control of >51% of the network.
That isn't even accounting for the fact they can knock others off the bitcoin network easily. If you have 10,000TH/s but cannot communicate with the network, that hash rate means nothing. DDoS or bad BGP routes, doesn't matter when the nodes have no way to talk.