I don't think it's a perfect solution, but it might help on the margin? We don't need penalties to be so high that they drive firms into bankruptcy and make insurance unaffordable.

A lower amount of financial risk would be enough to provide incentives for companies to buy insurance and improve their security in whatever way makes sense.