Whats the Rockepool staking risk

Hope the community can help me with some perspective. I know the whole point of the ETH merge is to move to proof of stake. So cool!

If you can't be your own validator you can go with one of the popular staking options Rocketpool and get rETH.

Is it right to say you're taking risks of the bridge being hacked and losing all your ETH and it could happen that rETH depegs? Is there a particular reason why Rocketpool is less vulnerable?

Hoping for any technical info that might quantify the risk? I.e are we talking Harmony project level risk as in there could be exploits found in the bridge/code or quantum computing risk as in nothing is certain but beyond current technology risk?