In the wake of the Pegasus revelations, states must halt the use and export of surveillance technology