All countries spy on all other countries, generally speaking. Exceptions are usually going to be down to resource constraints, not principles.

As an asset you still go to jail if you get caught. Or killed in potentially nasty ways, if it's a less democratic country.