The U.S. Treasury Department has outlawed certain ransomware payments. If it was serious, it would go further, says our columnist.