NATO has been more effective at responding to hybrid incidents than at deterring them