To add: Choosing which risks to tackle should definitely be weighted by difficulty, impact and available resources.
Also, this feels like it's forcing an external portfolio manager view on the internal operations of a startup. Nothing wrong with this - it's just odd to me.