On the other hand, the more they ask for, the less likely they’re going to get paid for it. If they keep asking for $1M from organizations that will pay becaus

On the other hand, the more they ask for, the less likely they’re going to get paid for it. If they keep asking for $1M from organizations that will pay because that’s pocket change, the more organizations they can attack. If they start asking for too much, they’ll see they won’t pay as quickly, other people will start selling services to protect against you that seem more attractive, etc.