You should address that question to d0vs, as he is the one who made that point.
But now that I have a chance to think about it, I can see his point. Most companies don't really take that particular risk into account and just kick the problem down the road. If you tried raising it as an issue, you'd get responses ranging from 'sure, figure out a way to value the risk and we'll add it into the model', to 'who cares really?'.
This. Most corps with Deep pockets already have a big team on procurement, and I have no say in what tools I am allowed to use to get my job done. All those stuff is already decided. I may go and say, "Hey, have you seen this, it's better than X", and that will not yield anything at all.