This doesn't meaningfully increase risk to the Debian project, which is already one of the most prominent Linux projects.