“Creating less loss than insurance otherwise might have created is not regulation or loss prevention. Rather, it is damage-control, and that is what insurance devices designed to combat moral hazard almost always involve. Insurers face a daunting set of obstacles to further reducing policyholder risk below what it would be in the absence of insurance.”