The DPRK is often portrayed as incompetent, helpless state purely able to eke out an existence by the grace of China (to whom it is useful only as a sort of attack dog cum buffer state). So the fact that they've managed to run an operation that can steal this much crypto may come as a surprise to many. I don't imagine their intelligence agencies are quite on the same level of electronic warfare capabilities as USA, UK, Israel and friends, though.
> That money (in any form) can be stolen by a malevolent state?
Right but as we repeatedly saw in the last couple of years, a North Korean hacker could swindle some dope out of their $10k ape jpeg from across the globe at relatively little cost. They'll have a bit of a tougher job stealing that same $10k from someone's bank, from a safe deposit box, or hell even from a box under their bed. It requires another level of sophistication entirely and the costs and risks would be prohibitively high. I am sure if the North Korean state took issue with me personally and wanted to empty my bank account, they could probably make some headway ... but they'd likely get caught and they'd spend more time and effort doing so than they'd actually be able to retrieve.