Blockstream refusing is probably less about confidence in their patch and more about the reality that paying ransoms just puts you on a list of entities that pay, you'd have another demand within six months.

Weekly is holding but I honestly don't care about candle structure right now, this is an active exploit situation and nobody knows where those coins actually land.

Buying into an active exploit situation before any post-mortem is published is exactly how people get wrecked twice. At minimum wait to see where the 600 BTC actually went.

Blockstream isn't daring anyone, they know the attacker already extracted what they could and the "ransom demand" is just the exploiter trying to monetize the remaining leverage before it expires completely worthless.