Just gonna put it out there that some anti-DDOS service providers have been caught running protection rackets instead of actual DDOS-protection before. Being in the DDOS-protection industry is very profitable thing for a botnet author.
And what are LLM scrapers, but legitimized botnets?