I'm not asserting that it is. In risk management, you shouldn't ignore known unknowns like that, you should either adapt your threat model or risk accept, not

I'm not asserting that it is. In risk management, you shouldn't ignore known unknowns like that, you should either adapt your threat model or risk accept, not simply consider that risk nonexistent until proven.