All true, but it is exactly what happened in this latest attack!
And yes, reportedly exchanges have increased the number of confirmations required to confirm a deposit as a result. But it's too late for the ones who got ripped off by the double spend!