Three attacks which aren’t particularly esoteric:
- Miners don’t ack the withdrawal bundle.
- Miners steal the coins.
- Someone else broadcasts a Tx to steal the coins and send them to miner wallets, and miners don’t reject the Tx. You could further incentivise this with a larger RBF.