Instead of an index maybe read the article as they mention two specific risks, both potential yes, but they need to be kept in mind versus the others on the list:
1. Who they and what the new owners are.
2. Since the issues from the first independent audit were addressed, there has not yet been another independent audit to verify security.
Security risks constantly are in ebb and flow situations. But they do point out there is no actual risks shown yet - that is why an up-to-date independent audit should have been done.