> want the option where NSO loses but the money goes to the actual victims instead of Zuckerberg
"Punishment has five recognized purposes: deterrence, incapacitation, rehabilitation, retribution, and restitution" [1].
You're describing restitution. We're still on deterrence and incapacitation, i.e. fining NSO so it stays away from America and possibly putting it out of business so it can't keep selling its wares.
We are seeing justice from the many ways. There aren't many people who appreciate waiting on justice in crimes that are ruining a lot to steal a little.