How can we fight back? Besides outcompeting them for the hashrate?
I genuinely believe that is enough. Furthermore, the attacking organization would also be terribly naked to violent physical attacks, since such a mining operation is not something you run in someone's basement. Add army-grade security to the operating expenses of the attack.
I don't believe someone would go through all the trouble and effort of a 51% and not have some profitable double spend attacks lined up and ready to go. They could rug-pull most exchanges and merchants all at once.
I would suggest you read on the double-spend ability of the 51% attacker. I still think you are overestimating the power it provides. Spoiler: a successful 51% attack doesn't allow you to "rug-pull" anyone if by that you mean stealing someone else's coins.
I share your optimism and hope you are right but I can never be sure that will always be the case.
It's definitely hard to be sure about complex things in the future. But I rest calm since the incentive structure promotes node runners to behave that way.