For years, cyber insurance was sold to small and mid-sized businesses as a backstop that would take the sting out