The big unknown is, at what point is a cyberattack so significant that it warrants a physical-world response.