They could cost billions but new exclusions based on whether attacks are ‘warlike’ or not will prove bad for everyone