PoW is a security mechanism, but not in the way most people think. Most people think it's about how hard it'd be to have a larger network hashrate able to initiate a 51% attack. It's not.