I see it like a vaccine. A ransomware attack is generally not as bad of a damage as a real attack. A vaccine might make you feel kind of bad, but it's not as bad as the thing it protects against.

Plus, there's other benefits. Companies might at least think a bit more about storing data about people (their employees, customers, etc) if there's a risk of it being stolen in a ransomware attack. That's a win for privacy overall.