I've heard of enough cases where the ransomware gang have not followed through after payment of the ransom, that I think that time ("if they don't actually provide the files when paid") has already passed.