Consider pawn attacks, too, in evaluate_threats()