All good examples of how
**probabilities
** are the specific domain of risk assessment.
Another important component of risk assessment is mitigation assessment.
If a
**possibility
** is easily avoided or circumvented, then it isn't very much of a risk.
But mitigation depends on communications -
We (this site in general) only communicates with less than 1% of the affected device owners (that is a generous estimate of our readership).
Amazon has "communications" (through OTA broadcast updates) with all affected devices.
So risk assessment and mitigation should best be in their hands, not ours.