Persistent cookies are stored as text files on the user's hard disk, making them readable by anyone with access to the machine or malware. This exposes session information to theft. Options A and B are incorrect - cookies are transmitted via HTTP headers and do expire based on their set expiration time, regardless of browser close. Option D is incorrect - persistent cookies do have security risks.