"the massive risk and uncertainty of replacing a CEO"

This is not what we're talking about. This is about risk to the company, not risk to the CEO.

"Essentially CEOs are able to hold the board hostage."

Exactly. There is no risk to the CEO. They hold all the cards.