Question: are pdb files a security risk?
Answer: If you never expose a stack trace to your users (and generally you shouldn't), there isn't really any additional security risk of deploying PDB files. ... A bigger security threat is something like Reflector which when used on your DLLs will allow them to view your source code, with or without pdb files.