Proof-of-work is proof of work done. Unlike node count, it cannot be spoofed.
You misunderstand.
What
is being spoofed is the version stamp (not the work, obviously).
Do you have any experience using mining pools? Have you even mined a single Bitcoin?