Event sourcing is risky, complex, and should be avoided in 99% of systems
You sign up for event versioning, projections, replay strategies, eventual consistency, operational overhead, and significantly harder debugging
The biggest risk is that it's difficult to reverse