Cons/Risks:
Both the Overt and Covert “attack vector” risks seem to my eyes to be based on this assertion:
Meta and Threads history indicates that they will function as a massively giant, unmoderated or poorly moderated Activitypub server and also shows them to be a mendacious untrustworthy company.
All the other risks you referenced all stem from that base assertion.