Power Banks with QC3/4 or PD would potentially feed 9-20v into the Attiny if an appropriate device was connected and called for the increased voltage. Possible solution would be to add a 5-20v input regulator between vbus and the Attiny to protect it if this case was to occur.