Even more so for a boot-strapped startup - fronting 100s of dollars in insurance is a big ask to get started without taking on investor money.

In this environment would an early stage JIRA, Salesforce or Bootcamp have gotten off the ground without incident?

Probably a place where a viable startup should be able to apply for Gov funding or tax breaks for security investment, much like they provide funding for R&D.