Proof of Work can be done in a way that is extremely expensive to scale - see Argon2 or RandomX algorithms. Basically, the idea is to resist ability to offload computation to GPU/FPGA/ASIC. Without them and with a memory-intensive algorithm, cost of an attack grows fast.