By making use of the larger intelligence apparatus without peer to choose targets carefully... like insights into dead holders, trails of coins believed to be lost, or heisting the heister to your example like NK.

Raiding a Coinbase would kill the golden goose, and shipping client level malware or straight up confiscation using their unique position would be opening such box.

For Bitcoin to achieve their national security goals, other states need to feel at least as secure holding it as they would gold (US Military could with few exceptions take lesser states gold by force if they didn't care about optics)