Risk Assessment for Hospital‐Acquired Diseases: A Risk‐Theory Approach