it is kinda, there is no way to * permanently * steal money, as it involves gaslighting all the network, which requires more computational power than the sum of the computational power of the nodes you are tricking

there is a wonderful video of 3b1b about it: https://www.youtube.com/watch?v=bBC-nXj3Ng4