Theoretically the attacker could also be picking up 0-fee transactions, but my intent was to really say this: it doesn't matter how small a double spend is - the ramifications for the network are the same.