I actually totally misunderstood how this all works. Even if a provider successfully did a 51% attack, they'd have to sustain it (keep mining blocks) to double spend. So it's financially infeasible. And validation nodes are super cheap to run, so rules cannot be broken. Bitcoin is so resilient and well designed, wow