"more hashes != more security" is true even if POS does not work (or rather, security scales sublinearly with hashes - economies of scale + diminishing returns on value of security). Nothing-at-stake is solved by DPOS, the ethereum team lags behind POS development by a few months it seems (they just mentioned using TAPOS a few weeks ago when the inventor has moved past it a few months ago).