Profit vs. risk in medical marijuana