Fighting ransomware is filled with security trade-offs.