How would you even begin to model the risk here though? There's no straightfoward financial loss to Solarwinds here except their reputation likely being forever

How would you even begin to model the risk here though? There's no straightfoward financial loss to Solarwinds here except their reputation likely being forever ruined. Do you ensure the value of the entire company? When your client is the USG and foreign hackers exfiltrate secrets through your platform, I don't the DoD cares that you had insurance.