Re: "Never attribute to malice that which is adequately explained by stupidity"
For a country which is target of Russian aggression, it's only natural to assume that any widespread attack on it's infrastructure was initiated by the aggressor. And only after that was disproved, other possibilities may be considered. Of course, if some administrators failed to protect their systems (big 'if', we don't really know), they should be held accountable.
But still the blame should be placed where it belongs, on the perpetrator, not the victims.