> when it comes to scheduled foreign terrorists, there is no (legal) excuse
Okay, how - as a human being - will you reconcile that with the fact that your employees will be tortured to death if you don't pay?
You could stay legally compliant, or you could save your employees' lives. Most moral people would do the latter.
> If you're operating in Colombia without K&R (or, apparently, basic OpSec), that's on you.
Hindsight is 20/20. You are correct, but this statement is fundamentally unhelpful when the AUC is already at your doorstep.