Colonial Pipeline paying the ransom shows that only better security can stop this vicious cycle