Actually LE could. They would re-issue a new valid cert for your domain without removing the old one. That would enable a MITM attack.
One could either spam DNS responses at the LE clients or push bogus BGP routes towards LE, and quite probably other things. And you don’t even need LE’s help to do any of this.