[snarfed]"attack" is probably too broad a word for just using or sending requests to a service. DoSes can technically happen to any publicly available web site or service; webmention and websub aren't so much more vulnerable to them than anything else
