"But for 0-conf here's an explanation of how a double spend can be done: https://jasonc.me/blog/bitcoin-bip-133-double-spends-bch"
I mean you can get it to confirm on the blockchain. That's not really what I'm getting at. I'm wondering how someone would steal merchandise of sufficient value to justify the effort.