Exchange Confirmation Requirements
Coinbase probably requires even more confirmations for a deposit of that high a value. According to https://www.crypto51.app at this moment, it would cost some $600,000 to attack the Bitcoin blockchain for one hour. That means sustaining a 51% attack and potentially (not definitely) double-spending a deposit to Coinbase that had several confirmations. 

If you are a merchant that accepts Bitcoin you must take this risk into account given the value of the transaction. A $1000 deposit to Coinbase is probably safe after three confirmations, because it would cost so much more than $1000 to reverse three blocks.