Good list. To best extent clients should guard against what malicious relays may do. For the first two, I know that at least Amethyst got a Tor-routing option.