Take "risk-free" literally and three risks remain, which is the practical heart of the term. The first is inflation risk. A nominal Treasury pays a fixed number of dollars, and if prices rise faster than that return the holder ends the period with fewer goods than they started with. Treasury's response to precisely this problem is a separate product: as TreasuryDirect puts it of Treasury Inflation-Protected Securities, "as the name implies, TIPS are set up to protect you against inflation," with a principal that "goes up with inflation and down with deflation." That a distinct security exists for the purpose is the clearest evidence that an ordinary Treasury does not carry the protection.
The second is reinvestment risk, and it lands hardest on the shortest and supposedly safest instrument. A 13-week Treasury bill pays a rate fixed at its auction, and the rate available at the next auction thirteen weeks later is unknown today. An investor holding a rolling series of bills has no certainty about anything beyond the current one, so the "certainty" of a short bill is certainty about a short period, not about a horizon.
The third is interim price risk, and here the Securities and Exchange Commission is unusually direct. Its investor bulletin on interest rate risk states as "a fundamental principle of bond investing" that "market interest rates and bond prices generally move in opposite directions. When market interest rates rise, prices of fixed-rate bonds fall. This phenomenon is known as interest rate risk," and then removes the obvious escape hatch: "Interest rate risk is common to all bonds, even U.S. Treasury bonds." It also notes that "the longer the bond's maturity, the greater the risk that the bond's value could be impacted by changing interest rates prior to maturity."
The same bulletin states the default-free-but-not-risk-free distinction outright, which is the whole of this page in two sentences of the SEC's own: "When the U.S. government guarantees a bond, it guarantees that it will make interest payments on the bond on time and that it will pay the principal in full when the bond matures," and, against the misconception that a government obligation cannot lose value, "the U.S. government does not guarantee the market price or value of the bond if you sell the bond before it matures." A 30-year Treasury held to maturity pays what it promised. Sold in year three, it pays whatever the market will give.
From those three risks follows the second half of the story, which is that there is no single risk-free rate. Treasury builds its curve from bills of 4, 6, 8, 13, 17, 26 and 52 weeks, notes of 2, 3, 5, 7 and 10 years, and bonds of 20 and 30 years, and those maturities carry different yields on the same afternoon. Which one is "the" risk-free rate depends on the horizon of the question. Comparing a one-year investment against a safe alternative calls for a short bill; discounting a cash flow thirty years out calls for something at the far end of the curve. A page on the equity risk premium already notes that published estimates vary partly by "which risk-free asset is used," and this is the dependency behind that observation.
The practical consequence is that the choice propagates. The risk-free rate is subtracted in the numerator of a Sharpe ratio, it is the baseline of every risk premium, and it is the discount rate at the bottom of a present-value calculation. Change the assumption and all three outputs change, without any new information about the investment itself. That is why two competent analysts can publish materially different figures for the same asset and both be doing the arithmetic correctly: the disagreement is upstream, in a parameter neither of them observed.