what obvious attack vector? It's just a list of urls and dates, and the dates don't even really mean anything.
It would be better if it acted like a vouch tree so you could create a web of trust but there's no enforcement mechanism so I don't even know how that would work.
