Are AppImages a generel security risk?

Since it doesn’t specify --runtime-file, it uses the default runtime, which doesn’t use the unmaintained version.