SOUNDS about right.But if you have the time, over a long time QQQ always (almost) beats SPY meaning higher volatility doesn't mean higher risk, using Graham's definition of risk.
But looks like B Graham woud have preferred DOW+ SPYV \more value


Maybe less money than SPY + QQQ\ but more value\ lower PE

Another issue is that we’re using std dev, which really only works well on normal distributions and we know that market returns (even log returns) are not normal. But, IMO, despite practical implementation challenges, the above mental model is useful when thinking about the difference between volatility and risk.