If the bad actor already exists on the network then it is possible. No new adversary is going to be able to procure enough mining equipment and get it running i

If the bad actor already exists on the network then it is possible. No new adversary is going to be able to procure enough mining equipment and get it running in a small enough time frame, however an existing miner doesnt need 51%, they only need 51% - their own hash power.