I know little about insurance from a professional context, but as an investor what I know is often insurance companies do not earn more than they pay out from premiums, they earn it from the float. This can persist for very long periods of time.

The entire “cyber” insurance thing has seemed extremely questionable to me. Technology is changing too fast and software propagates far to quickly to meaningfully quantify risk based on anything which has happened in the past.