The only thing I view as a potential attack is UTXO bloat, since there's no real limit to it. One can price it out, though. And the fad is greatly reduced compared its brief popular period, since people know those tokens are scams now.
Putting images or arbitrary data in it is pretty benign considering there's already a consensus block limit.