so they are also good at risk management, as they’re avoiding cannibals

Eh, I’d argue it’s actually the exact opposite of good risk management. They’ve spent a lot of time and money mitigating something that’s extremely unlikely to ever pose a problem. They should take a step back and reevaluate that risk matrix, maybe get a second opinion on it too.