In most cases yes, at some point the attacker will want to turn his tokens into cash and at that point he is at the mercy of centralised services who gets to decide.

Here's an old computerphile video: https://youtu.be/UlLN0QERWBs

Etherscan provides such a service for ethereum: https://info.etherscan.com/ethprotect/

As long as there are enough centralised services with enough volume that agree such tokens are tainted the decision is effectively made for the entire ecosystem.