Cyber insurance coverage is slowly changing, and some policies may not provide coverage for social engineering attacks like ClickFix.