You make use of several independent authorities for each timestamped document.

The chance is exceedingly low that the PKI infrastructure of all the authorities becomes compromised.