A state actor will do those things if they're willing to be overt about their actions. Many aren't, both for the sake of preserving their image, and due to tactical concerns (e.g. you don't want to kill the golden goose).

The point of spyware is that the target isn't aware of it.