Maybe we have a different understanding of how this would work. My understanding is that the malware would not be deployed to remote computers. Rather, the malware would be embedded in files that were never meant to be distributed outside of your network. You are either in possession of those files or not, and whether someone believes that you have them or that you owe them money is not really relevant.

The issue of IP theft is not simply moral panic. There are national security implications, as we saw in the Chinese attacks on defense contractors.

(Not that I believe that embedded rootkits would have been helpful or anything)