Of course, any additional package installed outside of Django and Wagtail can introduce security risks.