We aren't being presented any evidence that they are playing both sides of the table that brazenly. However, I can't see a situation where if the firm were in a position to stop the ransomware globally that they would actually do so.

Maybe an altruistic individual within the company, but not as a directed managerial effort.

Like I said - probably just general scummy behavior rather than criminal behaviour

I believe they would because the press will be worth it for future business. Not all ransomware but certain strains.

If they are a UK company with a prominent young leader it seems just as likely to get you investigated or indicted.