It would be difficult, but not impossible, for an owner of multiple large pools to make them collude and thus require additional confirmations, but tensions inside the management resisting such an operation keep this a strictly theoretical scenario.
Not to speak of the economic cost of this all. If your probability is as low as 0.1% or 1%, it's a big gamble to make, with a lot of money on the line (a big chunk of the mining network in electricity cost for an hour). This only makes sense to double-spend a pretty rare transaction, worth millions or with a very well paying lobbyist / politician (in the case of a censorship-motivated attack).