I haven't noticed any bad actor traffic. Perhaps yggdrasil is still too obscure to bother attacking.

The stationary nodes are connected to several public yggdrasil peers that are geographically close by. The routing "just works", though connecting to a peer can take a few seconds, at first.