and UASF are a thing in PoS as well, if some entity/entities acquire a majority of the staked coins users can simply fork the malicious actors out. It's functionally equivalent except that it's an order of magnitude more expensive to acquire the required coins as opposed to getting the equivalent in hashpower.