Comment by romwell

How about letting the user decide whether they want to scale beyond a certain point or incur huge charges?

Not too mention: if the primary purpose of these services is to allow a DDoS and then charge the user for it — then, yup, you're guessing it right: it's a scam.

When their business model makes DDoS attacks profitable for them... They're not in the hosting business, they're in DDoS/extortion business.