IAWYC, but in general the right thing to do is to reduce the risk until the marginal cost of reducing it more exceeds the disutility of what one is risking:

Not necessarily. The reduction may have positive value in absolute terms, but carry the opportunity cost of preventing you from devoting those resources to more valuable risk reductions.