ATMs and vending machines in Russia run nonfree software — the machines' owners cannot fix them.

We might argue that it is ok for banks and companies in Russia to be attacked in this way, as punishment for Putin's invasion of Ukraine; but I expect the same attack vector exists in most or all other countries too.