You bootstrap the pos chain onto the pow one, so you have your trivially checkable first part. After that it.s not exactly trivial to fake the whole chain without holding validators private keys (remember, they had stake in pow chain).

Im kinda at a loss about what other vectors of attack possible, hard to find any digestible info, and pos protocol designs are really complex.