Agree, the government should step in and (finally!!) take actions against those foreign adversaries.
But this doesn't change the fact that it is not the governments role to protect the facilities of a infrastructure provider against sabotage (or even acts of terror), a company providing such services in the EU has to comply to the CER directive and secure its operations.
There is a very basic reason for that: I could undercut every provider on the market by not investing in security and resilience. while everything works well I will beat all my established competitors and gain a significant share of the market.
This creates a risk of critical infrastructure stability for the citizens of that country. So if inevitable issues in resilience arise.....I demand the government to step in and take over my operations...?