A 70-month prison sentence tied to BlackCat shows how ransomware response roles can become a security risk when trust is abused.