So whenever you need to make a change to a component, module, etc you're supposed to use an override so that it won't be altered on future core updates.
Could those overrides be a security risk as the base code is now older as you update the core? I've never seen any mention of updating the overrides with new updates.