The solution to defeating and preventing ransomware is Software Asset Management, fully funded through the Department of Homeland Security and mandated by law for civilian agencies.
Default Deny or Deny-All Permit-by-Exception approaches to cybersecurity are unchallenged in their ability to improve the security efficacy of any network.