2) government has and will always use whatever tools exist, trust Pegasus is 1 out of many...
3) from a realistic standpoint it is up to 'Apple' is anyone to fix this issue from a technical standpoint, there will always be security holes and tools to take advantage of them. Shaming the toolmaker does little.
4) the real solution is the people have to control the government, only in those scenarios can you put 'ethical' constraints on this kinda thing... Those who are in countries where the people don't control the government really have no recourse