There are moral, upstanding people in the cybersecurity industry.
This does not make the cybersecurity industry moral and upstanding.
Many of us arrived in infosec because we wanted to protect people. Protecting others often invites risk to ourselves. "Smart" businesses do not invite risk.
You can not and should not expect anyone who can profit from the regime to stand up to it.