You know, I am surprised we don't just code into Bitcoin to shut down if faced with a need to reorg more than 5 blocks, rather than accepting an attack chain. Then all an attacker can do is temporarily DoS a chain - far less disruptive than rolling back transactions.