Romanian jet downs drone over Estonia

A Romanian F-16 fired an air-to-air missile over southern Estonia around midday on May 20. The target — a Ukrainian drone deflected into allied airspace by Russian GPS jamming — crashed 30 meters from a farmhouse in Põltsamaa (ERR, Aerotime). No one was hurt. It was NATO's first aerial interception over a Baltic state. The missile worked. Everything designed to protect the people below it did not.

Ten Incursions, One Government Down

Since March, at least ten drone incursions have hit four NATO states at a pace of roughly one every five days (Defence News). Ukrainian drones targeting Russian energy infrastructure near St. Petersburg get knocked off course by electronic warfare. On May 7, one struck a Latvian oil depot. On May 15, Finland shut Helsinki airport. On May 20, Lithuania issued its first-ever mass civil alert, sending the president and parliament into shelters (Euronews).

The political damage hit Latvia hardest. PM Siliņa resigned on May 14 after the defence minister was forced out over the Rēzekne depot strike (Washington Post).

Ukraine attributed the deviations to "deliberate" Russian electronic warfare (Ukrainska Pravda). Russia's foreign intelligence service took a different tack, fabricating a claim that Latvia was permitting Ukrainian drone launches from its soil and warning that "the coordinates of decision-making centres on Latvian territory are well known" (Atlantic Council). NATO Secretary General Rutte responded directly: the drones cross allied airspace "because of the reckless, illegal full-scale attack of Russia" (Euronews).

Thirty-Five Lost Years of Shelter Neglect

The Põltsamaa drone carried fuel but no confirmed warhead. Had it carried one, few people nearby would have known where to shelter.

Estonia issued mobile alerts during the incident using a warning app launched one day earlier for a military exercise (ERR). Mandatory shelters for new buildings take effect in March 2028. Public sirens do not exist.

The gap spans the continent. Germany retains 579 functioning shelters from a Cold War stock of 2,000. Berlin has none (Taz). Poland can shelter 3.8 percent of its population (Business Insider Poland). Romania lists 4,538 civil protection shelters, but in Tulcea, a frontline city near the Ukrainian border, not one of ten public facilities works (Adevărul). Only Finland, which never dismantled its Cold War network, can protect most of its urban population.

Money is now moving. Germany approved €10 billion for civil protection on May 20, its largest such investment since reunification (German Federal Government). Poland has earmarked 22.5 billion zloty through its EU Recovery Plan, with major shelter construction starting in 2027 (Money.pl).

The structural bottleneck sits in Brussels. Under EU treaty law, civil protection is a "supporting competence" (Article 196 TFEU): the EU can coordinate and co-finance, but cannot compel any country to build a shelter or install a siren. No common alert standard exists. On May 20, Lithuania used cell broadcast, Estonia used a pilot app, Latvia warned only border municipalities. Three NATO allies, three incompatible systems.

What the Missile Cannot Fix

Russia's electronic warfare creates these incidents with built-in deniability. GPS jamming blinds a drone's navigation. Spoofing feeds it false coordinates. Some deflected drones may then autonomously lock onto the nearest target matching their visual programming. Regardless of whether Moscow actively steers drones into NATO airspace or merely creates the conditions for drift, the physical threat to civilians is identical.

NATO proved on May 20 it can shoot down a stray drone. The Romanian pilot had clear skies and visual contact. The next interception may offer neither. The alliance can now intercept the threat. It cannot yet protect the people underneath it. Under current EU law, no one in Brussels can make national governments fix that.