There's a big difference between an underground group doing it in semi-secrecy, vs a state-sponsored company doing it publicly. With said company somehow not being sued into the ground or said country's action not being taken as an act of war in situations like this.
> I’d prefer if they started selling Pegasus to absolutely anyone at all
The high value of what they offer comes from the scarcity, which result in lower likelihood of it being patched.