Hmm. I would expect them to have layers of security, with one of those layers being funds in a cold wallet with serious access control around it. If I were asked to insure them, the premiums and coverage would hinge on security layers and mitigations in place to prevent loss. I don't think it's unreasonable to have funds in a cold wallet.