"In 2017 Russia used an NSA-created zero-day..."

Ignorant tripe. The NSA might have discovered or purchased it, but they didn't create it.