“The U.S. federal government's culture is characterized by an over-obsession with risk mitigation, viewing risk as a pass/fail concept rather than a spectrum.”