The ransomware attackers could maybe get around this by doing the virtual equivalent of sending the severed finger or ear of a kidnapped victim. Give the ransomware target a painful example of what non-compliance would entail.