Yes, but attackers being able to create transactions that they themselves can verify would make the situation even worse. What defence does IOTA have against th

Yes, but attackers being able to create transactions that they themselves can verify would make the situation even worse. What defence does IOTA have against this? It seems an obvious exploit.