What we are learning is that there are far easier ways to steal bitcoin than the so-called 51% attack. Miner collusion would be so expensive to pull off and the amount of money you can steal this way is not that great - you still need the elliptic curve signatures to verify, so the only thing you can really do is "double spend" the bitcoin that you need to have in the first place.