I know some intelligence people. This isn't what they tell me. They tell me that western governments are obsessed with following the law and limiting what their cyber operations touch. It's born out by what I understand from non-classified sources. For example, I read through the source code of Stuxnet when it first came out. There was a ton of guards put in to limit the potential damage it made.
That Canada spies on the USA more than Russia is the biggest bullshit I've ever heard. Read the Snowden leaks and listen to natsec podcasts. The Russians are in a ton of the US infrastructure and the CIA is freaking out about it to the point where they consider cyber to be a bigger existential threat than a nuclear armed DPRK.