Fair point, but part of risk analysis is looking at what can happen when a tool is not used as designed. Obviously you can't cover all eventualities, but one

Fair point, but part of risk analysis is looking at what can happen when a tool is not used as designed. Obviously you can't cover all eventualities, but one thing you should do is focus on the worst possible outcomes and work them backwards.