*Spanish prime minister’s phone "targeted with Pegasus spyware".*

NSO, the company that makes Pegasus, claims to make sure in some mysterious way that the software is used only against legitimate targets, but also claims that it doesn't verify who is actually targeted. I suspect that this is doubletalk. Perhaps by "legitimate targets" it means "targets actually chose by an authorized user."