Explain the concept of Value at Risk (VaR). What are its main limitations, and how does Expected Shortfall (ES) address them?