From my understanding, Taleb criticizes the native use of synthetic quantitative models with strong assumptions like VaR because they give a wrong picture of the real risks. But I don’t think that his point is that risk management is worthless.