For probably most nations the "state-actors" part is irrelevant as they have no magic hacking method not afforded to anyone else. The exceptions are nations host to companies that supply hardware and software to be backdoored.

This whole thing has been blown out of proportion.