Should ransomware payments be banned?