It's like spam in a decentralized system. Attackers can't change consensus within the system but they can slow it down to a crawl. Proof of work in Bitcoin is just an anti spam mechanism.