[jsprogrammer]

An attack and a new protocol are the same thing.

If a single miner includes the transaction, a majority can just bypass that sole miner.

You do need 100% of something, but that something is just >50% of the miners.