Are these attacks only applicable if you spend from the address? Is it just as safe, not counting privacy, to receive multiple transactions, as long as you don't spend?

Interesting I didn't know about that attack method, but yeah I think making sure you spend using coin control could help an issue like this and don't let your wallet decide what UTXOs to spend