PoW IS against sybil. It's what gives one chain, one tx or the "healthy" majority kind of a network credibility because with the most PoW it is chosen over others. this is no guess, it's common knowledge. I mean, srsly. dont make me look for sources for basic stuff like this.
...
more ramblings without backing anything up with anything more than "because I say so and trust IOTA".
...
Really, PoW works against Sybil? How awesome, now where can I download IOTA full node software and run it and have it connect to the rest of the network? Oh right, you cant. Because pow is not protecting against sybils, and not avoiding a "clustering" of peers which then mess up your non-existent "consensus" aka monte-carlo-randomly-select-a-head algorithm so a coordinator is required.
You dont "buy 100000 chips", you make one which has such power, an ASIC, or just use an off-the-shelf FPGA and program it - it would give you enough power to block any smaller IoT devices from transacting, or double-spending them. If iota becomes worth anything more than an iota of cow dung, rest assured people will develop "100000 power chips" to attack it just like they developed bitcoin miners.
can we stop forming hot air?
back up your arguments. that's minimum scientific requirement and necessary to fuel this conversation.
google scholar, science direct, even stackoverflow could be helpful here.
Maybe I can back it up like this, see this letter here, O, is big, now see it here, o, is small, and look now, its gonna be so miniscule you can hardly see it . magic isnt it?
Now then, let me back this one up, IoT devices are really power-constrained and energy-constrained devices, look here https://www.arduino.cc/en/Main/ArduinoBoard101 and here https://punchthrough.com/bean wow, 32Mhz, 196kib, all do you think that will need 150W of power to run or less than 2W of power to run, what is your guess? How many of those would you need in a network to outcompete a normal PC? Do you want it to be wasting your battery while it computed dumb proofs when you could instead just not waste power, and send a request over a trusted encrypted link to your cloud or whatever platform you have?
A good one https://www.crowdsupply.com/pinoccio/mesh-sensor-network