US and India have very enforceable bilateral cybercrime treaties. And it is very well enforced on both sides.
The article makes it seem that India as a whole is operating in some North Korea-ish way.
A US citizen can well complain to CERT-IN (https://www.cert-in.org.in/) for any reported cybercrime with proper documents and it will be treated as an enforceable crime.
In fact, quite funny considering the US Chambers of Commerce have filed an appeal with CERT-IN that the compliance requirements are very stringent (https://economictimes.indiatimes.com/tech/technology/cert-in...)