Yep, the EU classifies this as "critical infrastructure". Operators of such services (including water, electricity and digital infrastructure) have to comply to the highest level of the EU CER-directive for Physical and Cyber Security. This includes physical shielding, strict access controls and resilience against physical sabotage/terrorism as well as natural disasters or severe climate changes
I agree that the government should step up on against the military adversary on a country/regional level, but even then it is not their job to step in and do the job of Starlink as a provider of critical digital infrastructure.
A player in these markets has an obligation to secure his own facilities, otherwise every new market-entrant can undercut all competitors by not investing in security at all, until it's big enough to become a national risk and the government steps in to secure its business.