A single malicious actor buying up enough tokens to take control of the chain is always a risk for DPoS. The more tokens one actor tries to buy though, the more expensive it will get. This would likely be a very expensive attack to make.