the point is that the attacker needs to open all those channels in the first place, so not super easy but possible