Just like that Chinese balloon that was supposedly spying on America, that was never proven but most people accepted it was China. Unless they can prove it or China admitted it then it wasn't China / end of
when they say "China" presumably this would be a rogue hacker based in China rather than the Chinese State Government, but I suppose it's suits a xenephobic narrative the government likes to peddle