Risky business: the problem with MAPPPs