A problem (for the criminal org) might be that if an employee is willing to follow the customization steps for the ransomware and deploy it in order to receive

A problem (for the criminal org) might be that if an employee is willing to follow the customization steps for the ransomware and deploy it in order to receive a share of the ransom, it might not be much more difficult or illegal for the employee to just do everything by themselves and receive all of the ransom, cutting out the criminal org completely.