Does implementing Sitemaps entail a security risk?
No. Implementing Sitemaps doesn’t entail changing your website’s structure or sharing any non-public information with Google. Verifying ownership of your website only involves adding a verification file to the site’s root or verification meta tag to your site’s homepage. Submitting Sitemaps simply involves adding a file to your website’s root directory. That’s it. Sitemaps have been implemented by government agencies that maintain the most rigorous website security.