What risks are you concerned about?
you could be for example an attack target by someone malicious
antivirus can't put in quarantine some virus and afftecting in this way my full node, even if virus can't harm me, it can be avoided with linux but still...
problem related to bandwidth limitation, due to providers ecc...
Why is a machine running a full node more likely to be a target?
I guess someone could obtain the list of node IPs (trivial), there would be a slim chance those machines could contain bitcoins for stealing.
People who know what they are doing keep them offline however, so the risk is then gone.