This is why we have an incentive to stake. If people are staking, this attack becomes impossible without owning a serious amount of coin.