Chinese state hackers have held persistent access in U.S. water, power, transport, and communications. Officials call that pre-positioning. A closed-door insurance exercise then asked what if 5,000 water utilities went down at once. The game found no shared playbook.