In short, it’s meant to give developers deeper insights into the system internals. A potential risk of running development mode in production would be that you expose more information to your users about the system you’re running Grafana on. The information could then be used by malicious actors to plan their attack.
A couple of things that I believe are configured by development mode:
Enable more verbose logging and descriptive errors