> 2. Risk is convex, so every risk increase by measures not taken is multiplicative, not additive.

Wait. Is this true? f(x) = x^2 is convex but f(x+d) = f(x) + O(x). Are you saying that human risk assessment is estimated to be exponential?