Worst-case risk is coherent