The risk is real. One safety switch may not be enough