Is There a Reluctance to Use the Most Offensive Tools in Our Siber Arsenal?

We have been engaged in espionage on russian networks, on their computer systems for several years now. It is well within our capabilities to do something like attack russia's critical interstructure the problem. But i think we're very reluctant to do that because they have those retaliatory capabilities as well. We don't want to take any actions that the puten government in russia would interpret as an escalation and trigger a reprisal. And not only is that going to have extremely detrimental effects on our own citizens, but that too is its own form of escalation that could lead to greater conflict. I mean, you have to reserve the sharpest tools in your arsenal for when you would need