Biggest risk is invisible complexity creeping in. Keep the system operable by the smallest competent team. If volume is spiky, budget for burst capacity explicitly.