"There's a misconception around threat actor negotiation that if you're going to speak to a threat actor, you're ultimately ...