The resource requirements are a massive downside, but they are only necessary for the "permissionless" model. In almost all cases it is equally good to use a permissioned model where the parties are all identified in advance, which completely avoids the need for proof of work (because there are no sybil attacks when everyone has a known and fixed identity).