Cyber insurance for healthcare providers has to underwrite far more than HIPAA penalty exposure, from patient safety disruption to medical device risk.