It only really obviously makes sense to pay in one scenario: they've encrypted everything (including backups), or you didn't have backups at all. Having immutable / offsite / offline backups may well be less common than one would hope.