And that's the last time anyone buys cyber insurance from Zurich. What's the point of cyber insurance that doesn't cover ransom wear? Just a useless waste of money.
Auto insurance industry works with the automakers and regulators to develop and enforce standards for crash safety, airbags, crumple zones, collision avoidance systems, etc. and employs litigators to recover damages from the at-fault party.
Insurance companies aren't just professional gamblers. They are risk managers. You pay them to deal with the nitty gritty of risk mitigation in whatever domain because it's not your speciality.
How are you going to manage the risk of enemy damage in war? You're going to wield more violence than the threat, and seize its assets to make yourself whole. Instead of settlement or recovery, we call it reparations.