How could he double spend? sending a transaction with the same input right after or with a 51% attack? As for as I know bitcoin cash removed the Replace by fee feature.