Actually I hear DNS is often used with cloud APIs as a way to have botnets and trojans contact the mothership for things like instructions or wiring payment to

Actually I hear DNS is often used with cloud APIs as a way to have botnets and trojans contact the mothership for things like instructions or wiring payment to decrypt drives, etc. It used to be they were at the same domain names, but folks got wise and started banning domains, so now they use domain name "trials" and random domain names to resolve to changing IP addresses at scheduled intervals. Or at least that's how I remember hearing it described. So DNS is as critical to botnets/bad guys as anything else is online. Also, since registries are global, all it takes is one country refusing to follow the rest of the world in trying to block spammers from registering domains, and DNS resolution becomes part of the solution. Of course they could go elsewhere but at least CloudFlare wouldn't be part of the problem.