“They have learned that risk is the product of both probability and consequence; assessing risk is thus a matter of finding credible ways of measuring both. Some”