The NSA most certainly has the keys, and inshallah I hope that's the case - our nerds better be better than their nerds. I just think they don't want make our defensive capabilities public. But the many billions per year going to NSA better show some results. Maybe our great Chamber of Commerce can insist on making the NSA's great work and capability available to the Western market forces so key to the current prosperity we all enjoy.
Assuming the ransomers aren't completely incompetent and are using 256-bit or even 128-bit AES, why would you assume that "the NSA most certainly has the keys"?
They might be good but they aren't good enough to randomly crack AES.