safety paradox