Legal sector should not encourage ransomware payments