Two bases, only one host chose

Bulgaria's parliament voted to host US tanker aircraft. Cyprus never chose to host RAF Akrotiri. Both sites now appear in reported Iranian strike planning, and the difference matters more than the threat itself.

According to FT reporting carried by Al-Monitor and Saudi Gazette, people close to Iran's regime said Iranian forces had examined possible strikes against US or allied military sites in southeastern Europe, should President Trump escalate the war. Two locations kept surfacing: Bulgaria's Bezmer air base and RAF Akrotiri on Cyprus. No reviewed source produced a confirmed operational order or declassified intelligence assessment backing the claim (Fakti). This is contingency reporting, not evidence of an imminent attack. But it put European territory on another country's target list.

Bezmer: authorized risk

Bezmer is the cleaner case. Bulgaria's National Assembly authorized a temporary US deployment: up to eight KC-135 aerial-refuelling aircraft and around 250 personnel, running from 24 July to 1 October (Stars and Stripes, Demócrata). Bulgaria is a NATO ally. An armed attack on Bezmer would fall inside Article 5, NATO's collective-defence commitment that treats an attack on one ally as an attack on all (NATO).

The public can see who approved this. Parliament voted, the deployment has an end date, and the military function is stated.

Akrotiri: inherited exposure

Akrotiri works differently. The base sits inside the UK Sovereign Base Areas, territory Britain retained when Cyprus became independent in 1960 and still administers directly (UK Government). Cyprus is an EU member but not a NATO ally. EU treaties govern the base areas through a special protocol, treating them as distinct from ordinary Cypriot territory (EUR-Lex).

If Akrotiri were struck, London would bear sovereign responsibility. But Cyprus, the country geographically exposed, would have neither control over the base nor a direct Article 5 route to collective defence.

According to Cyprus Mail, a drone suspected to be Iranian-made and proxy-launched struck the base in March. The UK has since contracted £800,000 for additional air-raid sirens around the base area (UK Defence Journal). Adaptation after the fact, not reassurance before it.

Cyprus's government told reporters the republic was "not a target" and maintained channels with Tehran (Politis). That position is understandable, but it leaves out the part that matters: the installation that makes Cyprus relevant is one Nicosia does not control.

Where accountability already differs

NATO said it was "prepared to address any threat" without announcing any new deployment or formal security consultation tied to the report (Al Jazeera). Bulgaria's Interior Minister Ivan Demerdzhiev said Sofia had taken "all possible measures" at Bezmer, exceeding what current threat assessments required (A News).

Germany shows what host-state oversight can look like when a government insists on it. A 2020 Federal Administrative Court ruling established that when serious indications of international-law violations arise from US operations on German soil, Berlin must investigate and press Washington to comply (BVerwG). German courts can force the government to scrutinize what happens on bases within its borders. Cyprus cannot do the same for Akrotiri, because the base is not within its borders in any operational sense.

As To Brief reported two weeks ago, US weapons stocks depleted by the Iran war already raise questions about the depth of America's security guarantee. The question surfacing now is more local. The Iranian contingency may never become operational. But it has already shown that when foreign military infrastructure puts Europeans at risk, citizens should be able to trace who authorized the function that exposed them. In Bulgaria, the risk was politically authorized. In Cyprus, the exposure is inherited from a sovereignty arrangement most citizens cannot alter.