Order#is_risky? should take into account empty string