Control is very relevant here. The hardest part of nuclear weapon - plutonium core - was there. The fact that you don't have access keys from electronics which controls explosives around the plutonium core is kind of non-issue for a state actor.