>I think the difference is that the West is engaging in surveillance and not sabotage.

This isn't true though. Pretty much all countries with the capability and incentives to perform cyber attacks do, including the US. For example,

US attacks on Russian power grid: https://www.nytimes.com/2019/06/15/us/politics/trump-cyber-r...

US attacks on Iranian nuclear facilities: https://en.wikipedia.org/wiki/Stuxnet https://en.wikipedia.org/wiki/Operation_Olympic_Games