The verification signature only proves that the note was signed by the senders pubkey and that all of the information is correct and untampered with. PoW means expending CPU power (like I'm doing for this note) to create an signature. This would be possible but expensive for spammers to accomplish.