Speaking of misleading cybersecurity language, note how you used the term "nation-state", which is a word that indicates a specific subset of countries and is not just a fancy synonym for "country".
That's an existing problem that hasn't been solved in geopolitical meatspace. I don't expect it to be solved in cybersecurity first.
That said, for my understanding: which political bodies are countries but not nation-states? Is this a reference to places like Singapore and the Vatican, which are probably more accurately labeled city-states?
> Present-day examples of multinational states are Afghanistan, Belgium, Bolivia, Bosnia and Herzegovina, Brazil, Canada, China, France, Ethiopia, India, Indonesia, Iraq, Madagascar, Malaysia, Mauritius, Montenegro, Nigeria, Pakistan, Philippines, Russia, Serbia, Singapore, South Africa, Spain, Sri Lanka, Suriname, Switzerland, United Kingdom and United States.