Whereas, every CPU in the planet not currently mining XMR (probably +98% of all CPU cycles) could be persuaded to attack.
Botnets are a risk to any CPU/GPU mined crypto.