Yes they are real risks, but they are not immediate risks.
The magnitude of the risk is this: you have to learn/figure out how to set up a real multisig wallet and then also be prepared to follow some potentially technical instructions to get the funds into a new wallet you have created.
You should also keep an eye on the company. The company may alert you when things are getting wavy through app notifications, but I wouldn't rely on it.
Get it set up, and then take your time but start building up your shared knowledge of a more self sovereign solution.