You know who perpetrates attacks against Western countries, certainly. What you don't know is who perpetrates attacks against, say, Chinese or Russian or Iranian industrial concerns.

I don't agree with your assessment of western governments hacking commercial products, including those made by their own companies. It's not innocent and it certainly has commercial consequences to the company affected.

It's legal (in Canada) for CSE to hack foreign commercial entities any time the government believes it to be in our national interests. It's the government of the day that determines what those national interests are. It answers to no one on that question, and almost any reason will do.

You offered your reasons why you believe the Canadian government doesn't hack foreign companies. Respectfully, your reasons are weak. It's not realistic to believe that Canada would willingly hack the Brazilian Ministry of Mines. but never touch a Brazilian company like Embraer.