That was exactly my take.

Regrettably, these folks are in no way equipped for a cyberwar.

All the less so for their deps etc.

I expect my - and anyone’s - employer to pay health insurance, and to keep that data safe. Customers are fine here as far as u can tell, but if you tell me that you’ll cover some amount of risk and then you reneg,were rightfully going to have a humdinger (see OCMS) of a war on that one.

If you insure my health risk, fr where I sit, you also insure the risk of my data that I handed over so you could insure the risk, in the first place.