Making it illegal to pay off hackers makes sense to some, but others say it’s an oversimplistic solution to a complex problem.