Revolut should refuse to pay the $3 million ransom demand