Generating 1MM units of PoW will always be more efficient than 1MM people generating each 1 unit of PoW.
Optimization always works better at scale. Therefore an attacker always has the upper hand.
PoW is absolutely useless as a CAPTCHA and doesn't even do what C.A.P.T.C.H.A. says.