> the absence of known danger is not the same as safety.

Feynman had some interesting comments on this problem regarding NASA's "it worked ok last time" approach to risk assessment before the Challenger Disaster.

https://www.youtube.com/watch?v=4kpDg7MjHps#t=150