Why do you think a double-spend attack would be easy to figure out? It could rely on start of the art crypto attacks which aren't known to the general public, or some very obscure bug which has slipped past thousands of eyeballs.