wont it make the network open to attacks if the difficulty suddenly drops low?
Not really. Until it stabilizes, my expectation would be that you would just need to wait for more confirms before you can be assured that the chain you've put a transaction in hasn't been orphaned. Now 6, perhaps as high as 20. When lightning is available, I don't think that's really that much of an issue.