I've always wondered why the more static part of web pages and resources don't typically get stored on a RO file system. It's easy enough to remount -o,rw to make changes for updates. It doesn't stop all the attacks, but it stops a whole lot of them.
This doesn't solve the stolen data type ransomware, but most companies seem to not even try to be the least bit resilient. The risks have been the same for decades. Why act surprised now?