I’m no expert but I’ll go through it. DDoS can be mitigated, but it’s a scaling issue. Usually it’s a problem for medium sized services. Lawsuits will fall mostly on individual server owners. And even then, the links are being hosted elsewhere. Botspam is a huge issue. I expect that to be one main problem. And also monetization. That will also be a big problem.