They do not replace the regulatory or operator threats