> If it became known that ransomware criminals never actually decrypt your data they would lose their "business", so it is in their interest to actually do it.

This opens up one of those weird moral dilemmas akin to asking whether it's moral to hack someone's exposed device to patch a security hole: Would it actually be a net positive to create a ransomware variant that had no decryption key, but acted like it did?