Pools are certainly disincentived from performing attacks; they would likely lose a ton of business if they were to do so. And miners in general are long-term holders that are disinclined to harm folk's confidence in the system.

However, a pool can still be a single point of failure; someone could exploit a vulnerability to hijack a pool for a short period of time.