That conflates the state with a business headquartered in it. It begs the question of what the sanctions would be for: is the argument that this firm is an arm of Israel, that Israel turns a blind eye to abusive businesses, or something else?
A Discover-Tech ad impression does not in and of itself confirm targeting or infection with spyware.
That might be why the authors, in that disclaimer:
• used "in and of itself" without a footnote
• downplayed "confirm targeting" by sticking "or infection with spyware" into the same sentence.