Interesting, so basically no transactions are illegitimate they are just wiping out old ones by publishing a longer chain? In that case, could you protect yours

Interesting, so basically no transactions are illegitimate they are just wiping out old ones by publishing a longer chain? In that case, could you protect yourself against an x hour attack by waiting x hours to consider a transaction confirmed?