there's one sense that vanity npubs tend to be riskier: in many cases, people use external services to generate them, so the private key is exposed to more computers, or insecure software, increasing the chance of leaking it