Is too much risk assessment risky?