You're looking at the wrong metrics. The risk of using a solo-dev product is them losing interest and stopping support (or as someone else pointed out, not being able to deliver the required level of support).

Both types of products also have a chance of being bought for cheap when they are failing, and at least kept alive on life support.