It definitely sounds like there are some potential security concerns with DHT: https://en.wikipedia.org/wiki/Distributed_hash_table#Securit... A new implementation called Tonika is mentioned that sounds promising to defend against the sybil attack but I don't see much activity on the project post-2012.
As you mentioned, nodeID becomes the URI (You can CNAME a domain to that) and protects from node spoofing, but it seems like a if someone could affect the DHT, they could cause a DOS. I supposed that'd be analagous to BGP spoofing routes? If the only way to falsely modify the DHT is a mount a sybil attack (I have no idea), then it could actually be an improvement over the current state with BGP.
The other concern of course, is if the DHT implementation is intergalactic-internet scale.