why is the concept bait_string required?

[kkplein]

Alternations outside of the bait-directory are also detected, as long as they match the failregex. I understand the honey-dir, as you try to make it enumerated first, so it will trigger the failregex before actual data is being encrypted.
But why the bait_string in the filenames within the honey_dir?

[kukoarmas]

To make sure we detect file changes even if the ransomware does not use known extensions
The idea is to use a random strinng because if we use a known or predictable string someone could write a ransomware that avoids changing files with that name