He did not commit an "act of war." He is an individual, who tried to cooperate with his government and was denied.

Meanwhile NK offense regularly attacks him on a nice day, and on every other day installs ransomware on US hospital infrastructure, putting actual lives at risk... All this guy did was shut down their capability to do so.

I am unaware of any law that he broke. IMO, he also did not do anything immoral.