This makes a case for data caps or charging internet by usage which frankly nobody really likes. Maybe outbound caps for home users (if thats where a lot of the DDOS are coming from). The risk of getting shut off or a higher bill if your transmitting to much data might make people start noticing and securing their devices.