Bitcoin was premined.

A bit misleading imo. Satoshi mined the genesis block on January 3rd but no blocks were produced until releasing bitcoin core 0.1 on January 9th on the cryptography mailing list. Only the 50 bitcoin from genesis block you can argue was premined, but I don't think you can call mining after a public software announcement a "premine".

Otherwise very good observations. Only attack vector from miners is double-spend or denial-of-service. Can't steal coins nor change consensus rules.