It does not matter if it is 51% or 33% or 73.5% vulnerability, it is still vulnerability, but not a flaw. A flaw would be something which prevents the network from being used. 51% vulnerability does not prevent bitcoin from being used, it just puts a limit on how secure it is. Same goes with any other consensus algorithm. A lack of security at all would be a flaw.