Yes, this is why subsidiaries in the private sector are useful - when something goes terribly wrong with one, like it did with NSO, it doesn't implicate the whole of Israel/IDF - at least not explicitly.