As an obvious statement: I think this should be interpreted similarly to some ransomware not infecting devices with RU keyboards: it's just about avoiding difficult regulatory environments.

The analogy, of course, goes further. Though unlike most ransomware companies, NSO has British and American VC funding.