Are nations ready to be the cybersecurity insurers of last resort?