Law enforcement and private surveillance companies are currently investing a ton of effort into using public blockchains (which is most of them) to unmask participants in crypto transactions. At the same time, they're putting more pressure on Coinbase and friends to do aggressive KYC, and Congress keeps considering bills that would effectively outlaw anonymous crypto purchases. It's not going to be the safest way to collect ransoms for long, if it even is today.