China just has white collar analysts and no real cyber capabilities because if they did then all the bug bounty websites would be out of business.

Swap the US/China here and you can see for yourself why you're making a poor argument.