Depending on what the Botnet is trying to achieve, CPU can be “expensive” in a time sense. If you are doing a credential stuffing attack with something like a COMB dump, then every cycle counts because you have a ton of creds to check.