IANAL, but I believe the reason why it remains legal to pay a ransom for the return of kidnapped loved is because criminalization would be unconstitutional. Like it or not, I believe the same is true for ransomware.
I attended a talk by the DOJ about it. It’s a very sharp edge case. Their advice is to proactively reach out before you make the payment to someone on those lists.