Physical Risk Data Gaps Are Pushing Regulators to Use Third-Party Vendors