Note that this is a mostly theoretical weakness: the cost to attack is orders of magnitude higher than cost of simply creating fake blocks, which are almost just as good at defauding SPV clients (particularly when you have a pile of money left over by using the cheaper attack!).

Anyway, not many SPV clients actually exist these days - instead it's much more common for "lite" wallets to actually use trusted servers.