Yes, these are good points.
The contracts to design the system are not finished yet. There will need to be mechanisms to disincentivize whales from doing this, along with moderator roles.
This isn't too different from Steem / Steemit where people wrote bots and tried to game the reward systems. Sometimes it worked for a while, and then the rules changed. WhaleCoin will have to change, learn, and adapt as well.
I hope that you are willing to help review some of the test whale/follower contracts when we have them ready and participate in trying to break it so we can see how it evolves.
Ok, and Proof of Work is also "flawed" by your definition because 51% mining attacks exist.
...exist, but are extremely costly. However the attack I described against WhaleCoin is practical, cheap, easy to pull off. Any dummy knows how to split 10k coins in 10 accounts of 1k coins each, and get 10x the voting power.