> It ultimately has to try something & be potentially exposing itself to detection

Yes, potential but not necessary. Think of the threat as funding a military against the military