> “you manage risk, but risk cannot be managed.” Ie. there is no terminal state where it’s been “solved.”

I often hear people misinterpret "risk management" as if it means "risk minimisation", but this is the first time I hear of "risk elimination"!

Risk management is about finding an appropriate level of risk. Could be lower, could be higher.