I tend to agree with op. Surely the NSO has blame but the real problem is the hole in WhatsApp and the fact that their security could use serious improvement. They even allow making backups of the unencrypted database to the cloud defeating the whole e2e encryption.