At the end of the day though, they couldn't have known that would happen, and they made the right choice. The Kaseya hack was terrible - they were trying to stop that happening again.
That's just the trolley problem, as other commenters have said. This whole debate is, which is a shame, because it means we're unlikely to convince each other.
This is not a trolley problem. The trolley problem has two assured outcomes - both leading to harm - and requires active intervention to choose the lower harm.
This has definitive harm for a potential gain against future potential harm, versus stopping an active harm at no direct real cost. It's a bird in hand versus two in the bush.
They had to make the choice with the info available at that time. And exposing and prosecuting ransomware criminals could help to prevent future cases: The perpetrators are techies who are not street thugs, they could make money with legit work.
At the end of the day though, they couldn't have known that would happen, and they made the right choice. The Kaseya hack was terrible - they were trying to stop that happening again.