State targets in the West have extensive defensive and counter-offensive options to protect themselves against threat actors and foreign interference. State level capabilities and resources such as the intelligence community, cybersecurity arsenal, sanctions, trade levers and military options provide a clear disincentive for attacks and a clear promise of retaliation in the event of one.
Non-state targets in the West have limited and delayed access to state capabilities and resources and must therefore be self-sufficient in their defense and response to foreign interference & threat actors. Large corporations can afford a reasonable defensive umbrella but do not promise a credible and sustained threat in retaliation to such an attack. The majority of organizations including SMEs, startups and NGOs benefit from no such defense.