Evesdropping should be protected against by encrypting everything. Have a device sampling traffic over the link and publishing anything found in cleartext. Embarrass users into encrypting their stuff. Then, on top of that, do point to point encryption of the data stream (which is super cheap to do - in fact nearly all high speed links do data 'whitening', which is encryption with a well known key - just encrypt with a secret key instead).
Resistance against the enemy cutting the fiber should just be to have lots of connectivity. Hard to cut 50 links all at once.