It's indeed stunning that given the implications of the spyware, the GoI has not just rushed to institute an investigation - as thorough as possible.
The only reason one can think of is that the government itself is the user.
The list of (confirmed and) potential victims further reinforces that hypothesis - beyond the pale any reasonable doubt.
And, *on top of that, now come these numbers*!