With crypto you face similar problems. You need an address, waiting is shortr, rugpulls and other scams are one of the biggest use cases so getting crypto stolen seems common. You might be able to verify that crypto was revceved but as with any trustless paymet solutions the issue is that getting the item you ordered is the part where trust is needed the most. Good luck asking back money when you get an empty box.
You dont need 51% attack to corrupt a ledger. Just enter incorrect info and the ledger is wrong. Not a damn thing a blockchain can do about that. Same issue is with any trustless system where you have to trust someone to input the correct info/do the agreed thing/ship the ordered physical item.