Yes, there are principled ways to model these things. You can compare the byzantine fault tolerance threshold across PoW and PoS. You can compare the cost of deviating from the Nash equilibrium, and calculate how much an attacker needs to spend to deviate in return for every dollar of damage he causes.