Are sigs in the witness data immune from malicious tx via lots of sigs?
I think they are since the transaction is hashed differently if the transaction uses witnesses. The different hashing method allows for faster hashes by using midstates which can be reused for every signature verification.