I mean like in the case of fancy bear they do work for the government. It gives you immunity to target everyone outside of russia. Look at the amount of ransomware that is operated from within russia.