The double spend is only possible against specific counter-party, for example an exchange or a merchant.

For very large value transfers exchanges are expected to wait for 100 confirmations (~17 hours) until they credit balance.

It's all probabilistic.

Finally, Bitcoin PoW is not security theatre, it is just one piece of the complex security system.