It all depends on who is doing the attacking. If the attacker is a state government or someone with billions of dollars and compute to spare, ASICs aren't going to fight this losing battle.
Heck, you can buy off the ASIC miners for a few million dollars (all we have to cover is their net profit, which is pretty low)