Good question. I don't believe most exchanges are "insurable". Finex is using BitGo as a third party so they are insured as an enterprise client. Sounds like a good workaround to get your customers insured but in this case it also led to their loss / hack.

Catch 22.

Exchanges should carry insurance though, it would add legitimacy to this space.