Not Paying Colonial Pipeline Ransom Could Have Made Things Worse, Says Cybersecurity Expert