I think the dynamic risk signals is already an assumed part of the system. The proposal here seems to be shrinking the trust boundary from "can Alice use Google Drive?" to "should this specific read/write/export API call on this specific resource be allowed right now?"

So yeah you're right in that it does add more probabilistic randomness just by virtue of changing the boundary of when the permission gate kicks in