Clearly the harm that can be caused by one witness is small, even negligible (a bit of chain instability, a potentially-harmful but generally-overruled vote on hard forks, etc.). But what about two witnesses? Three? Four? Where do you draw the line?

Clearly at every increment (starting with zero) where more and more witnesses can be installed with less stake, the chain is less secure.