1. A system, comprising: at least one computing device configured to implement one or more services, wherein the one or more services are configured to: receive risk profiles associated with traffic flows; and route, based on the risk profiles, the traffic flows by at least: if a first subset of the risk profiles indicate that a first associated subset of the traffic flows is below or equal to a predetermined first risk level, routing the first associated subset of the traffic flows via a first path; if a second subset of the risk profiles indicate that a second associated subset of the traffic flows is above the predetermined first risk level and below or equal to a predetermined second risk level, routing the second associated subset of the traffic flows via a second path that is isolated from at least a subset of a population of hosts used by the first path, the subset of the population hosts storing data designated by the system as sensitive; and if a third subset of the risk profiles indicate that a third associated subset of the traffic flows is above the predetermined second risk level, routing the third associated subset of the traffic flows via a third path that is isolated from the population of hosts.