It seems like the general case answer is "no, using a larger nonce does not increase risk". Otherwise an attacker could just imagine that instead of a 256-bit

It seems like the general case answer is "no, using a larger nonce does not increase risk". Otherwise an attacker could just imagine that instead of a 256-bit nonce, the nonce was actually 257 bits long but the first bit is always 0.