The possibility someone is able to ddos a lot of the master nodes, and has the funds to run a lot of them them selves is highly unlikely or even impossible.
A more feasible scenario is someone setting up 5000 nodes at once... Oh wait there aren't enough coins for that ;-)
This is right. Pretty difficult to take down 900 MNs in the network. There are protections built into the standard satoshi client.