I'm _really_ intrigued by this, but the skeptic in me worries that insurance companies would peg rates at ridiculously high prices due to the high risk and low accountability inherent in open-source projects.

I'm not suggesting that the "high risk" view is accurate, but more positing the _impression_ of said risk for insurance companies.