The US Government does stuff like this to other countries all. the. time.

We don't hear about it much. But if this is an "act of war" the US has conducted dozens of these kinds of "attacks" on others over the last ten or fifteen years.

Countdown to Zero Day: Stuxnet and the Launch of the World's First Digital Weapon [0]

[0]: https://www.amazon.com/Countdown-Zero-Day-Stuxnet-Digital-eb...

>If we do nothing, we're sending the message that these actions are okay.

I think it sends the message that these actions won’t trigger nuclear war. How would you even get public support for war with Russia?

We aren’t even close to maxing out what could be accomplished with economic sanctions! The US and Russia still have a direct trading relationship!

Maybe we should "send the message" that we won't install insecure shit on our networks?

Does anyone believe the US isn’t doing similar shit themselves ? In that light it seems pretty disingenuous to call out others for the same act.

One of the shortcoming of maximalist position, you lost your leverage.