The headers pre-sync is a great alternative to checkpoints. So much of your thinking in these decentralized systems seems to have to be defensive and operate under the assumption that there will be attackers.