“Sander Gerber defines risk management not as avoiding losses, but as avoiding unexpected losses by quantifying the reasonable worst-case downside.”