You need those confirmations because PoW is probabilistic. Any entity with a large share of hashrate, even if it's less than 51%, can selfish mine and force block reorgs on any PoW coin. Their successful attempts increase the more hashrate they have, but it doesn't require anywhere even close to 51% to start disrupting the network.