1- https://www.reuters.com/article/us-germany-usa-spying-idUSKC...
2- https://m.dw.com/en/how-the-uss-cia-and-germanys-bnd-spied-o...
1- https://www.reuters.com/article/us-germany-usa-spying-idUSKC...
2- https://m.dw.com/en/how-the-uss-cia-and-germanys-bnd-spied-o...
Some are too poor (take your pick). Others are rich, but small (the Vatican). Most just don't care enough to prioritise it over better things they could be doing.
And then, there are countries that simply consider the US an ally, and consider it morally dubious or practically unpromising to spy on them.
Add this up, and I'd be willing to give at least 10:1 odds it's one of a list of maybe ten suspects, even when adjusted for GDP or population.
As an aside, I'd really be curious why this "everyone does it" is used anytime something like this comes up? Is it just macho "I don't have friends but there are useful idiots that consider themselves my friend" talk? Is it nihilistic/cynical pretentiousness? International whataboutism to defend one's team?
Because it certainly isn't based on any actual data. If you add up offensive hacking by the USA, China, Russia, Israel, and maybe two or three others, you're pretty well done with the full list, but still close to <x> nations short, where <x> is the number of nations that exist.
My dad (a journalist, RIP) was once at a UN conference in the 70s, and made the remark to a Chinese official in a light-hearted spirit: "of course you spy on us, we spy on you, and what's wrong with that?" This caused a major row and he was forced to apologize.
It's not like war where innocent people die and a there's a lot of human suffering. It's just a tech race where the nations doing a good job get a deserved advantage without doing direct damage to the population.