The same thing is possible with Bitcoin btw. Today. Both Foundry and AntPool can pull a successful 51% attack even without colluding. They just won’t have 100% success perpetually.