To complete the other half of the story for those not familiar: most all infosec references to "nation-state attack" instead use it to mean "government backed attack" (regardless if a nation-state is involved in the context).

What if they use it to mean entities that are both states and nations, as opposed to the states, that some nations are composed of.