If he wrote Wannacry, he probably should be prosecuted. But the primary defense that the government and corporations should be using against cyber-attacks should be that they should be correcting the security of computer systems rather than putting everything into punishing the perps after the fact.