It is that simple.

How would having one Russian in a company protect them from ransomware? There's no way to make that occurrence detectable to the malware.

Or, for that matter, why would ransomware care about the father of the computer owner?