+1 yes, there is a risk! 
Woah, thank you so much for the detailed instructions! So, it makes sense to modify [patreon_login_button] shortcode to accept final_redirect_uri parameter, and make a PR to their github repo. Thanks again for taking your time to explain!