I think dusk attacks would be prevented by requiring the transaction to consolidate to a single UTXO. So you must have 1) At least three UTXOs with 2) Each having a maximum of X sats (dust threshold), and 3) All consolidate to a single address.