Presuming you are able to offer this service because you have those 100 BTC on reserve at Mt. Gox, does that make this service vulnerable to a denial of service attack?

I would bet that after you get a few fake anonymous requests made for 100 BTC each that at some point your reserves are gone and you can't offer this service until those requests time out due to no payment sent.