Espionage attempts like the SolarWinds hack are inevitable, so it’s safer to focus on defense – not retaliation