Fortunately it's not that easy to perform targeted attack on the witnesses, especially if their nodes are not directly connected to public network.