https://www.crypto51.app/ shows how easy it is to 51% attack some of the smaller PoW coins. For some coins, 100% of the hashrate can be rented from NiceHash, which removes the capital costs of the attack!
For example, Bytecoin (marketcap ~$1B) can be 51% attacked for $557!