As long as they can avoid loss of life (or significant loss of life) and direct attribution, but the rumors are still that it's Russia, this is a way to reduce popular support for Ukraine. The attacks aren't severe enough to make people want to support Ukraine to spite Russia, and it makes it apparent that there is a cost for the current support.