Update README.md

Additional commentary about how risk profiles are determined