The OP is quoting Tyler Durden, a fictional character of the movie 'fight club'. So take it with a grain of salt.
The OP is quoting Tyler Durden, a fictional character of the movie 'fight club'. So take it with a grain of salt.
But don't dismiss the merits of the idea. It's essential Risk Management[0], which is most certainly a relevant part of Information Security. Specifically, this is a form of Cost-Benefit Analysis (specifically, Qunatativie Risk Analysis[1]), a critical component in proper Risk Management; the reality is you cannot "fix" every issue.
Take a look at methods like Single Loss Expectancy[2] and Annualized Loss Expectancy[3]; you'll find that the Fight Club quote is very close to the real-world methodology. I cannot speak for the Automobile Insurance industry, but given Insurance is founded in Risk Management, it seems likely to be closer to reality than not.
[0] https://en.wikipedia.org/wiki/Risk_management
[1] https://csrc.nist.gov/csrc/media/publications/conference-pap...
[2] https://en.wikipedia.org/wiki/Single-loss_expectancy
[3] https://en.wikipedia.org/wiki/Annualized_loss_expectancy