What if, as a result of a risk assessment, I've learned that I'm already pwned? Nihilism or rationalism?