What we know about the NSO affair, what we don't -- and its potential consequences