Offense in Cybersecurity?

Google has proposed a cyber "disruption unit" to focus on more offensive cyber practices, altering a current proactive position to a reactive one. Especially with government as the customer of companies with an emphasis on offense, a big question is how legal and ethical boundaries will be drawn between “active defense,” disruption, and full “hack‑back” — and who decides where the line is.