Cyber operations against EU institutions by adversarial nation states have increased more than tenfold (!) between 2018 and 2021, according to the European Court of Auditors. The EU chose not to respond and impose costs in the light of this 1000% increase. If not now, then when?