Cyber insurance for medical device manufacturers now has to underwrite the possibility that a hack becomes a genuine patient safety event, not just a data or business loss.