Question: is winrm a security risk?
Answer: WinRM is much easier to secure since you can limit your firewall to only opening two ports. The default Windows Firewall rule for PowerShell remoting accepts all connections on private networks. ... An instance of PowerShell running as one user has no access to a process running an instance of PowerShell as another user.