application risks