Hmmm, I see where you're going but I'm not so sure they would have. The insurer would not be able to claim from the vandal as he did not do anything to them directly, so they do not have any cause for damages. It was a business risk, nothing more.
I'm trying to think of a more general example than this, but I'm struggling tbh. Yob throws a brick through your window, you claim on the insurance, yob goes to court, insurance doesn't go after yob for damages.
Floydbax is more on the money, I think.