In this case, the firm can organize a cyberattack through a front company to get insurance. But at the same time, the company will not suffer serious

This is a possibility, but most small businesses, the target of this article, are not going to sabotage themselves like this.