Risks to other people is also known as responsibility and that should also be accounted for. But sometimes there is an imbalance. You can be putting others at risk but not be properly considered responsible. I think there is a lot of that in software, particularly when people's privacy/data is at risk.

Personal risk is a bit different because everyone has a choice about what is acceptable for them. Risk to others should not be your choice. The responsibility should be fixed and defined and therefore it's probably easier to make logical arguments about compensation rates.