The programmers who i've read about getting hit with penalties as a consequence of working with companies such as NSO or with governments such as the UAE seem to be exposing a significant gap in the US' treatment of their most prized minds.

The NSA and other government agencies seem to not be attractive from the point of view of a great place to work and the money to be made in the private sector in the US alone is thin. . . economic forces dictate that supply will meet demand especially when the demand is rich middle eastern wealth.

There is no obvious "red team" or similar career for these people in the US to help defend the nations systems for a fee. All government contracts for cybersecurity go out in tenders that prioritize entities that can navigate the complex logistics of filing a response with the Government and working their way.

That's the biggest concern for me seeing this pattern emerge. On the specific entity here, the NSO group being blacklisted, that will change little. There is a systemic risk of us continuing to lose great talent to more attractive ventures.