The point is that the parent comment conflated validators with people, whereas one person or entity can control many validators. That doesn't say anything about it being better or worse than PoW, but it's disingenuous to claim that an attack needs to compromise so many individual people rather than potentially just a few entities that control vast quantities of eth.