> They can use their bank account to buy crypto and then pay the ransom.

This is actually more difficult than it sounds. Most banks and crypto exchanges won't allow a person to make meaningfully large crypto transactions without some account history.