You don't want to avoid attacks, you want to be resilient and "survive with the least scratches". This is specially important for a system worth so much money. Think about it, if such an attack were possible on Steemit, all our interactions would be cut off for the duration of the attack. That would be bad, very bad.