Having a reminder in the docs "do not pay extortionists, ever" might be a good idea, reduce the incentives to attack and prevent a financially-motivated attacker from getting a self-sustaining operation going.

It will remain a risk, though, just like there are ideologically-motivated attackers who dDoS Tor at their own expense bcoz "free speech is right-wing extremism" etc.