As I understand, if they wait 10-20 seconds and listen to the network to make sure no conflicting transaction is broadcast, the odds of a successful double spend drops to very very low.