Conventional wisdom: cyber insurance improves incentives and if everybody had it we would get better security. Wrong! Taking a behavioral view (e.g. how decision are made), this talk describes ten ways that cyber insurance is a misfit for the 'job to be done', and suggests better incentive instruments.