Personally I've always found "risks" in product roadmap tend to not be great. There's often no risks for 80 percent of the project then at the end we'll discover blockers and risks from teams who weren't (or weren't thoroughly) consulted. It's really hard to know and communicate with all the stakeholders in these complex organizations.