+ FWIW, 51% of the mining power only allows you to double-spend, not arbitrarily modify the existing ledger.
+ Since Libra uses a HotStuff variant, you need to control 2/3+ of the voting power to violate safety, i.e., double-spend. In exchange, however, you only need to control 1/3+ to halt progress (liveness).