> It should be illegal for any company to pay ransomware attacks. Period.

That makes as much sense as illegal to give your wallet to a mugger.

I.e. no sense.