PoS is mining. It's cpu-mining, not much different than what satoshi designed for Bitcoin.
But while anyone can attack a PoW coin, nobody can attack a PoS coin without investing first. Even in your scenario.
That's entirely inaccurate. The whole point of this thread is to get people to realise that PoS does not reinforce consensus; that's what PoW miners do.