Each evidence element requires loading the validator set from some recent past.
(see state/validation.go)
This could be a DDoS vector for block proposals, if we're not careful.