Its an alternative way to pair to the router without using a password. But you have to press the wps button on the router and then within 30 seconds press the same on the other device. Otherwise it won't connect.
it's a risk only of your router is physically accessible by others.