I think the argument would be that the risk wasn't mitigated although it should've been known. There may be other known risks as well.