With normal Bitcoin an attempt to do this would be massacred by the collective hashing power.
But if all you have is the satellite link and no internet, you can't get confirmation from other peers.
So if you imagine blockstream as an attacker, they could broadcast their version of the chain which say doesn't include payments they made on the main chain so that they could "double spend" them in places that rely solely on the satellite for truth.
Or am I missing something?
---
edit: I guess there's no way for blockstream to create blocks at the appropriate difficulty level fast enough, so it would be pretty obvious if they were trying to create their own fork. So I guess this does work..
Edit: responding to your edit. Yes a good point!