With OP's perspective services like Cloudflare, Akamai and anyone else trying to mitigate malicious traffic should just give up.

This extremely nihilistic view is not productive, and ignores that 99% success in mitigating bad actors is much better than no mitigation.