Considering that the hackers have the source code files, even if CDPR did pay out, they have no guarantee the hackers will actually stick to their word, and keep the Source to themselves. They will always have that copy of the files, and can change their minds at any time, for any reason. It's honestly smarter to just give them the finger, and try to move on as best they can.