> do you cut off whole university campuses because someone's "smart" coffee machine is participating in a ddos

Yes?

That’s the only reasonable way to go about it. If you block only single clients you’ll just paint a large bullseye on universities.