Right, it's more than certain now that with time we will be able to find a collision ("an estimated cost of $2.77M to break a single hash value by renting CPU power from cloud servers").

But there is a difference between the theory and actually finding a collision. And then a huge difference as well on how to exploit that.