No , they only need 51% with a PoW coin,
but it is the same as having a loaded gun, if no one pulls the trigger then no one gets hurt,
as long as the top 4 mining pool operators don't collude to pull off a 51% attack, then no harm.
But you are not trusting hashrate to secure bitcoin, you are trusting the top 4 mining pool operators.

People trust those pool prefer steady and stable income by being honest rather than quick profit (e.g. fooling exchange/merchant by double-spend sent Bitcoin) by perform 51% attack.
Your statement is only true if they prefer quick profit, don't care about losing money/reputation or pool operator is being illogical.
bitcoin has always recommended waiting 3 confirmations.
bitcoin don't have conscious nor intelligence to make such recommendation
