Safety/security risk is important too, but I was suggesting development keep an eye on
delivery risk.
I.e. the risk that a project won't be delivered with the expected features and by the expected end date
Fundamentally, time estimates are useless without a coupled risk/certainty metric.
If you ask me how long something is going to take, and I believe it'll take somewhere between 3 months (worst case) and 2 weeks (best case), what number do I reply to you with? And how do you interpret that number?
And how does my reporting change as we get closer to delivery?
Reducing the size of work being estimated band-aids the problem, by shrinking the absolute magnitude of the bounds, but doesn't fundamentally solve it.
Common heuristics like "double how long you think it's going to take" are other ways this appears.