> every miner on the pool has to agree to the attack so it is still decentralized

Do you think most miners are continuously auditing the blocks they are solving?

Yes, long-term they'd switch away from a dishonest/non-value-aligned pool, but the damage might already be done at that point.